d5f0371297d2795bb8c8c60516630efa_JaffaCakes118 | Triage

Sharing

General

Target

d5f0371297d2795bb8c8c60516630efa_JaffaCakes118
Size

141KB
MD5

d5f0371297d2795bb8c8c60516630efa
SHA1

aaa831d65557ede6bfaf13a6bb0ea481c9f2a3a9
SHA256

cc40a526d9baab6785a5a5041cfb60325b7cddc962ba7d42c34a5de3692a2ad5
SHA512

a94a6f4bec1ee7201d45ab15698a9c6f76c11f94ec3990ee2ce7a414b010eeeaaf9806c5850bd8a25f4fb3832d7d55258c7377011976765fbc0165a532269852
SSDEEP

3072:5TfR8TREOwQ2QRy9o1jKSNOYkwbV7RXLDD+y:VYRxngYjxONm7R7DSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5f0371297d2795bb8c8c60516630efa_JaffaCakes118

Files

d5f0371297d2795bb8c8c60516630efa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE