d5c4936159645a9c2c7b8f67edd56e8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c4936159645a9c2c7b8f67edd56e8f_JaffaCakes118
Size

315KB
MD5

d5c4936159645a9c2c7b8f67edd56e8f
SHA1

52eabae28acbaab026a005ce7c74a2d47f81d6d3
SHA256

f886e5f4490cd021156d7a4221026ea3465e338d21728c0ae631598b5d1dd3cf
SHA512

bce49b38399cfbbc021ceebe5819238258faaff039e4d920e39ca8dd4192ed703d70e7bec4d5dddec715ab4e130d4432030aec920a327692021ea58e32d541a2
SSDEEP

6144:Hq3gCzHoqWYHtSTYnI+tnYDcMbY4FmNzNwm+MhUa6xO1BcC1ct:Hq39z1NznI+1Kb5KzNVNrPcnt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c4936159645a9c2c7b8f67edd56e8f_JaffaCakes118

Files

d5c4936159645a9c2c7b8f67edd56e8f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE