b5da755ca28cfd7701543c056a971a59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5da755ca28cfd7701543c056a971a59_JaffaCakes118
Size

169KB
MD5

b5da755ca28cfd7701543c056a971a59
SHA1

5cda9273f368f71a8bba44e8c4229042713ccb7d
SHA256

4cae73b2d70f3052bc76c18e654376b2c2419b79004a9187e3ece741fdcd04fe
SHA512

fcdeef7106b40f6ce7b3c66a59348f5b19cd61f6824bdeeb68b3df990cbdbbc2e4cae2b6d8c3a6ecbcd4b261793508a4aab69daef9b1f0a352240d938e330d85
SSDEEP

3072:///5e7MZ6LHp3Z4UasdDLue4OVpb5nxqxmyVXXmcKEzlF5T:PJEvDdukb5nKmSmcNRzT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5da755ca28cfd7701543c056a971a59_JaffaCakes118

Files

b5da755ca28cfd7701543c056a971a59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ