f5020d1e646ecdb061235b2b052c94b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5020d1e646ecdb061235b2b052c94b0_JaffaCakes118
Size

264KB
MD5

f5020d1e646ecdb061235b2b052c94b0
SHA1

ffb8827e82f7f467844291abefcb7098cea91c10
SHA256

2994d572faa8fca91ecc01b901ca96d906d38329a41de4a5348f435afbbe2b1f
SHA512

cc7fbcc9afded8ec97537a5459c62e56238205b9814a641458e5abc688accdc803f83f3dec147f1d5152c9d56b18a150c98160cfde7826b1fb114d02ae892b37
SSDEEP

6144:+KcXW0kkkkkkkkFW8ZVvbXl9kkkkkkkkkkkkkkkkkkkkl/oQHp/D4OiV7To3:tcm0kkkkkkkkFW8rvjfkkkkkkkkkkkkV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5020d1e646ecdb061235b2b052c94b0_JaffaCakes118

Files

f5020d1e646ecdb061235b2b052c94b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ