d5a089fab9684f22e469c9a1524ef0a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5a089fab9684f22e469c9a1524ef0a4_JaffaCakes118
Size

121KB
MD5

d5a089fab9684f22e469c9a1524ef0a4
SHA1

efaf4ff68df9c325abe53dfa0645f3d1d8972dec
SHA256

b43fc523ab2585333d7f1f556d0afe4caee20d96bff8794a6b5494895a904f01
SHA512

326cf2f8d7a5e07302d9a15652e886b7bdecbfca4d1bf97ba87cad4f38b0acbe446f2ed765e357ea5ad755e84b3ea95147e03cf2da67656abacd8e5ea1b8b04d
SSDEEP

3072:E4jLrDwXHUAePf94YsfofOWGd2Mm+HE0UgNGs:E4jLrDwdaf94LDd2MmUE0UgEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5a089fab9684f22e469c9a1524ef0a4_JaffaCakes118

Files

d5a089fab9684f22e469c9a1524ef0a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE