b5ed4e2e42c62cae345abe630dd12a2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5ed4e2e42c62cae345abe630dd12a2b_JaffaCakes118
Size

488KB
MD5

b5ed4e2e42c62cae345abe630dd12a2b
SHA1

3b40f7d2a0d52801e1c64fa31ade9b1b9b5766ee
SHA256

c07317c639c1b3f95933c4bbd3d27dd37e48e4fdb6e15deea7a6a9f1383f310a
SHA512

d15908a037913fb0e091f774c2ff21afc78c9317cf03e54ea901e753a9dd4107e810142eea56ade41774ccf9d92fb76dddfc9a0dfa31995242dbbad646012c1d
SSDEEP

12288:QFNEGdAYnaj+S1OlEjUdNAgv4M5b4bIzdsTX0xTj:fAAYn8xiEjUdOgvHbGIzdsTX8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5ed4e2e42c62cae345abe630dd12a2b_JaffaCakes118

Files

b5ed4e2e42c62cae345abe630dd12a2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 52B - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE