d5ac1f18b3453b31c7facedcccfc12e2_JaffaCakes118 | Triage

Sharing

General

Target

d5ac1f18b3453b31c7facedcccfc12e2_JaffaCakes118
Size

2.4MB
MD5

d5ac1f18b3453b31c7facedcccfc12e2
SHA1

224e135d06c01ec0dd877be09148335903045c0a
SHA256

019b9b0caed52439e415076c12a0593875140ee3be0858bb4bb0c2b2fa6a64c5
SHA512

9f3cfd7f251671c27b39943ff1566af2490e3cebba81356e4718b62c452f14c5484edac775afe31cad663e0d82c6546375650e7b2baf8d5b243b0259fa42271a
SSDEEP

49152:o/YsqygBAy7FyScYrgg589NA0UWEkhp/An5hCz:wY8q58/Ab4fYn2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ac1f18b3453b31c7facedcccfc12e2_JaffaCakes118

Files

d5ac1f18b3453b31c7facedcccfc12e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ