f5c4b248673e07d39c9d9af69849f236_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5c4b248673e07d39c9d9af69849f236_JaffaCakes118
Size

550KB
MD5

f5c4b248673e07d39c9d9af69849f236
SHA1

92f1b870662d2d6844214f25868c3a8d6920dff4
SHA256

16af515711f982f36d04a847a40bb7358c9f0b8b616a4c93ab9d2603ca0543b3
SHA512

e88142439bf2994666ce429d788484da7736cee05981f86f29d8f668194d00f5d6ed1b63154a340c5c9882a166aa886c76e30e4438b69ab0c8b01646646ecfd6
SSDEEP

12288:wYNXd/6gHmaZv+UCQOWCPtA9NTs9H3P/YxEPZ+qDQ1pLW5y6rOsR3QtW+:vNN/fHmlKO9pJnJZipL4K+R+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c4b248673e07d39c9d9af69849f236_JaffaCakes118

Files

f5c4b248673e07d39c9d9af69849f236_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 727.0MB

.uukjjs
Size: 538KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ