f5635331320b798a695f71d607049b88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5635331320b798a695f71d607049b88_JaffaCakes118
Size

261KB
MD5

f5635331320b798a695f71d607049b88
SHA1

4f328b997b18fd4b67fe3669e457b0aa26fe3a4d
SHA256

2da162b5ddfa0cba5cee6976c3a24e58023c08ea7fbe6eca2b8aaf96ef283db1
SHA512

48125c28330ad5a324dc7f2e12861266c2aba2bdc53e05d1f955666293b6295a13d6c60af89319a91b70240bf5fdaefce8a8773050413e92781094452368cb60
SSDEEP

6144:khJ3lWrWl6jsG1I/XmjZ4UqqPNCUd4duv/QTtULskGefdRC:kZqWlc1bj2YPNKJea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5635331320b798a695f71d607049b88_JaffaCakes118

Files

f5635331320b798a695f71d607049b88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 76B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ