d5ad5499a533cc0da5a69a2dd5f25add_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ad5499a533cc0da5a69a2dd5f25add_JaffaCakes118
Size

583KB
MD5

d5ad5499a533cc0da5a69a2dd5f25add
SHA1

a522700e380486a02109ce58305228349e1638b8
SHA256

a84cd88155ed9abeedab3ea48b59e34f1c7a3ee19878ea8a8b63ea2a29e65f90
SHA512

9eada48cd20fe639540980a96586972d700849b32e9d9aa41434061a6cfb0fcc16f974582ae9ea75b0ac5f0b20efffff8a67e9bf8fdea4fcfd37184f9e763f8c
SSDEEP

12288:xblIh2K0x4RZ8y4gzr4HLW9yQVTaVOHn1d27u:xyr008yxS0V6OHn1o7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ad5499a533cc0da5a69a2dd5f25add_JaffaCakes118

Files

d5ad5499a533cc0da5a69a2dd5f25add_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ