f5707b5b03cd10f6df5cb06b454830a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5707b5b03cd10f6df5cb06b454830a4_JaffaCakes118
Size

292KB
MD5

f5707b5b03cd10f6df5cb06b454830a4
SHA1

a4bbc6554d9d27189cb1e3f3461c7f70957ee5c7
SHA256

bfe369ca0ccfbb9b9f3e6947bb75941257406d094acdcc7128baf7f4dc8408f3
SHA512

08dad64eb523a973193970036557de02b25598ec53a727c49b9feaacffa566198618ab9307ef1a036a58dd4f1c32c078e5359b595b3814ed11a3cfbb8e741d45
SSDEEP

6144:CjPekpl/LlCTMQEeQ5yJEOwia99A++oHSwRgN/N49DR5jFepzS8DtccRQZQqkQjd:CjWkTLlCYQEetEuYFQX/N46ziZQqpd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5707b5b03cd10f6df5cb06b454830a4_JaffaCakes118

Files

f5707b5b03cd10f6df5cb06b454830a4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ