a5c2df2301f0f654e46a48c864e492fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5c2df2301f0f654e46a48c864e492fe_JaffaCakes118
Size

1.0MB
MD5

a5c2df2301f0f654e46a48c864e492fe
SHA1

962d19c28c81326cd6d87cd352ea06a78f7b0503
SHA256

28b214883b31ca7a7208eed1887a0d9b2489e240cab01026dcecbf005c49fab8
SHA512

cdad6a56d1437a19e6f9021e4e3095eaf7017546c1c4d345200ad9e6b14ddf2209be7a3b454214fc6216c9ebe94ad4002b86ba385c15b7eb33c0f040288dda6e
SSDEEP

24576:hCKlSWHjTYv+DVPuaVTDxnsWHsApqVyEib44fBJ8TSB9dcy:hCQfD0v+8WDxnsWHssqVyh44f8TSB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5c2df2301f0f654e46a48c864e492fe_JaffaCakes118

Files

a5c2df2301f0f654e46a48c864e492fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1010KB - Virtual size: 1010KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ