a5b9c445a09e896512b693d41103cbd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b9c445a09e896512b693d41103cbd5_JaffaCakes118
Size

471KB
MD5

a5b9c445a09e896512b693d41103cbd5
SHA1

cbfeb85fc488fb3203458e767ff9bb735c501280
SHA256

2fd5f193dd5210466a4fcefa020381d5d6c4fa66b794012b91cd06036809a12b
SHA512

a28d930af70e78935606a9e18654b838fe16e132f038d711c12f781633a06897d2914a2a57f4653da5978bdfe5ca88449c7520e403be79676046a9937d364f43
SSDEEP

6144:kuMjyHZ1zYU2VMQ01VCRMeIW3D7kAEoaJkC3onxgl4rsCspAMsw1E6f4q56MPeA:fHZyDL08KODfCYglUQpAzTq56M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b9c445a09e896512b693d41103cbd5_JaffaCakes118

Files

a5b9c445a09e896512b693d41103cbd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ