5fc581670e035a1d47781db3d6c9bc21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fc581670e035a1d47781db3d6c9bc21_JaffaCakes118
Size

541KB
MD5

5fc581670e035a1d47781db3d6c9bc21
SHA1

a4394bb05fb69c1c1706ca68d91c0d9850bc80cc
SHA256

53915863f5f9385d4bcea8281e517cbba2e4aa1c0d811b71031480cf8305f8fd
SHA512

445ce328e1d0c1dfd5b9471bab4477ee306339c385585d5517e05025d01842023ff43353b72691e600d014ef5064f010481086dba309ae79143bfa906b23cc1f
SSDEEP

12288:rVKzt2HAZV84WzKpo8SlcUAZemMX0dkLh/2:rCZV89Kpo8TzemMXokg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc581670e035a1d47781db3d6c9bc21_JaffaCakes118

Files

5fc581670e035a1d47781db3d6c9bc21_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.ssgkdbf
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.yufnkxy
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lstlvjt
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hfklqhg
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE