f5c62148ddf80c080f3dbca9875e78a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5c62148ddf80c080f3dbca9875e78a2_JaffaCakes118
Size

187KB
MD5

f5c62148ddf80c080f3dbca9875e78a2
SHA1

26ef6d4f759e42f0fa104f207a19df91949e6984
SHA256

b0754d6c864e8e8d40404315eca5af4a61668b0ceed22e7b4695869626d5b780
SHA512

cb078792ab1f1f4fb9d8c9ec090cde1dab04a7a803e80a8d1eff7ad1dec4a3641a9a4c5904e469171d648877c4fc7bca02baf489140b823d8f33b9192a3a71f1
SSDEEP

3072:KlxGfCZG5E5JYma4CKF/BmJcQxqzKt4SoBycmru50cptolqxHmmv:C05gJa4CKqYKtHWyczmc/rx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c62148ddf80c080f3dbca9875e78a2_JaffaCakes118

Files

f5c62148ddf80c080f3dbca9875e78a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.iat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.virt
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ