5fc0728736fb6923c6d6fe5c4bcf4d93_JaffaCakes118 | Triage

Sharing

General

Target

5fc0728736fb6923c6d6fe5c4bcf4d93_JaffaCakes118
Size

20KB
MD5

5fc0728736fb6923c6d6fe5c4bcf4d93
SHA1

67a59634cd06bb289fba139102fd5a9278509dc2
SHA256

91793376e1292e8cf8f5870c8f9c4277954c365361d944e2930d2f65b5892804
SHA512

a37ab2373dc2370c1995db42af2f7be43f9c9b464fbb6230c469d1fb2aa1de5d9d9e021b8cb635e70da29d039c4c29550e201ca2406ced000fa6bb97b527da6e
SSDEEP

384:bLankT4P7kn2l5d5i1zD05bkMYl/qkqlpyfh9:ykIl5d5AW6lykYpyf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc0728736fb6923c6d6fe5c4bcf4d93_JaffaCakes118

Files

5fc0728736fb6923c6d6fe5c4bcf4d93_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ