b5cc48e90bf63488f12d91fc4b040f32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5cc48e90bf63488f12d91fc4b040f32_JaffaCakes118
Size

1.7MB
MD5

b5cc48e90bf63488f12d91fc4b040f32
SHA1

757a63ff6b072813da491f22bb95e692df499aa5
SHA256

7bff9ec90258d23484183c2f8c182149d86cfade366d49a1520dc785686c7568
SHA512

2c0147440b1f65c3138301c06a0167098ae31faedbd341d2adcfe328af45e97c0b02a4f263fd1c55dcd660d88a61fb35df9388acd411fc02bbcbb320598fedf6
SSDEEP

49152:Byjg06cEqgCH0fTb3aNgOdTrU3BsOYUR:wjXDHc/aNguUxsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5cc48e90bf63488f12d91fc4b040f32_JaffaCakes118

Files

b5cc48e90bf63488f12d91fc4b040f32_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ