b5fc81ef87079ff360062c9605694a09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5fc81ef87079ff360062c9605694a09_JaffaCakes118
Size

1.1MB
MD5

b5fc81ef87079ff360062c9605694a09
SHA1

e3118abe9283f0e1d7d2c9f6695d5cfb42528624
SHA256

e5f48c84faad45c2693e36e01fb6c3f6e5070452a9ae257f7e6fb2139125615d
SHA512

d7ef91a98d11922f4148878ee161fb02445ea49ff570aede901eafeb16967f091748ba801e711f83f6424c2d1c154c83e03fcb60b78f9653141601805e5bd392
SSDEEP

24576:M4oKmf5R/pOCuxGU13IlBwaa6NKHb/JX0erOoqfD:M4uv/pOCIGk3Ivwaa6IHz10poY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5fc81ef87079ff360062c9605694a09_JaffaCakes118

Files

b5fc81ef87079ff360062c9605694a09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ