f5c332a280e94bf5aae688acc256abb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5c332a280e94bf5aae688acc256abb2_JaffaCakes118
Size

1.5MB
MD5

f5c332a280e94bf5aae688acc256abb2
SHA1

acaa103644f39b1e7ecf28d284bc6ce6f5b02575
SHA256

bd4809c8955dd903f1ee246029dfb94bca7e83c2d423e24f44ba4e02426d4233
SHA512

9f4334b361fd77400468ec00224ae55fdadceae26c5f8846eb97d7a14fe82e0b9b25cae158b94e1513afb67cd44984ae3d244f9ae77ddb796f89cc5f66cf43c8
SSDEEP

24576:ZRutr7f/q0N+kBw9qmoljoXYFDrric/dwVqBthRF32Uo5TeyxP:/I7KhueP0o0DrO2d7Z32Z5Tt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c332a280e94bf5aae688acc256abb2_JaffaCakes118

Files

f5c332a280e94bf5aae688acc256abb2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 979KB - Virtual size: 978KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ