5f737da69cba617591d15c9d78e70116_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f737da69cba617591d15c9d78e70116_JaffaCakes118
Size

220KB
MD5

5f737da69cba617591d15c9d78e70116
SHA1

0c69ee935f6594e2290839b55d836b417695877d
SHA256

ac81affd975845050de4eeab62b5f799573479df3adc3bf2bf17e04c2b734ec6
SHA512

530420dc8fe87aceeee90020c98aafe30dad76f5d374660365489078373004f6a27188fd28566e8254ea942f62cea8cc1a4383c0cc796a0b6b3285449e36999e
SSDEEP

3072:6i3XKtf2gWG4nTPAwQHUDqYnkapbvKsbWSnLfk+3f66ffffLcccb5+d40:zKt8G495WobbWSL3V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f737da69cba617591d15c9d78e70116_JaffaCakes118

Files

5f737da69cba617591d15c9d78e70116_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e21707552026f0c6c5bbf0f75441b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord616
ord619
ord617
ord632
ord645
ord652
ord660
ord685
ord100
ord187
ord186
ord199
ord520
ord529
ord537
ord578
ord581
ord580
ord589
ord598
ord595
ord596
ord608
ord607
ord610

Sections

.text
Size: 210KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ