d5bf14ad5673e1d3db3cb88cd3e3e67d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5bf14ad5673e1d3db3cb88cd3e3e67d_JaffaCakes118
Size

196KB
MD5

d5bf14ad5673e1d3db3cb88cd3e3e67d
SHA1

d9efdb14f865cc4cf4a3e51bce99dc5e1ace92ea
SHA256

ac344c520e600ad2a2f6d12a87452bc0c34356411d444b1cbed5c9f5fc86e026
SHA512

97fa34619aa89a1ff614aac4c606a2896a724ce00b089398928e8ff4b551bce72d54237cb0abcc3f0a1f4784fe2cc02fd8204a5afb08555c17103609a4891904
SSDEEP

3072:Snir3t+aUHVbH6OqQTSbWivYi+ap3t6JaNKl8/4VqHbK2p:V51/WaNo84Vq3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5bf14ad5673e1d3db3cb88cd3e3e67d_JaffaCakes118

Files

d5bf14ad5673e1d3db3cb88cd3e3e67d_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wlsetup.pdb

Sections

.text
Size: 923KB - Virtual size: 922KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ