a5ffc3dbe2d36b7fa1c63914121d7f48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5ffc3dbe2d36b7fa1c63914121d7f48_JaffaCakes118
Size

137KB
MD5

a5ffc3dbe2d36b7fa1c63914121d7f48
SHA1

1a2277bf5730237bc8f150cfdce293b74eb51712
SHA256

aa3982a14fc0abc3e1b2c3e0149c237d40d25f0600d03c3eebffb0d65210b027
SHA512

001a53210c08338e9d2030b92bdd78d6fc95080b54bbd2b5364f85974c554c9e6a9a79703ab98dad1c18ecd26c4cd9fa759d9baa72fdba25d7e5fb7595ead92c
SSDEEP

1536:aE9vwPAMzbBM3my8f0hSqC0EXb52YWO5K5+TlpDEZOkTH9zzkH/jOSWyVcBV4FR+:v9vGpNM31VhSKEVY5+ThkTHsrOSo8+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ffc3dbe2d36b7fa1c63914121d7f48_JaffaCakes118

Files

a5ffc3dbe2d36b7fa1c63914121d7f48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ