5f1bbd56ab2877d4fb4cea4548c95166_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f1bbd56ab2877d4fb4cea4548c95166_JaffaCakes118
Size

39KB
MD5

5f1bbd56ab2877d4fb4cea4548c95166
SHA1

2f9f3f3edf8ac30153c9d8de5f30c3a1b69d1e27
SHA256

8c63db4148b58f9470262878ad930370c0801147330c03ffccdb6444e0088de4
SHA512

acbaaf6a376e82399fe7be55c8e46988535d7f44fb10e2d680090c3dfc8b166ee42691b70530f7ac3676bddf1d31743a29a76ed4023b804e98f50f7b14aad791
SSDEEP

768:mmLv7IBUi3Px04CMJaFASQTcDl+jPicIKCVhfg6DG1WUtYqGhM:XLUBZ37C+sASQIPdhf9VUkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f1bbd56ab2877d4fb4cea4548c95166_JaffaCakes118

Files

5f1bbd56ab2877d4fb4cea4548c95166_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ