f5cd6510a5fa239aff1edd1a8e0feb02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5cd6510a5fa239aff1edd1a8e0feb02_JaffaCakes118
Size

35KB
MD5

f5cd6510a5fa239aff1edd1a8e0feb02
SHA1

7ea885dc99712fb0a3c18e840017c716606a2d17
SHA256

ff0fe9f8dd36ddcda0a1372581505f5b56639eca7e9b6e643eea470006a6115a
SHA512

5257a7999ab22432871ca7ea4555213c7cf399a28ea715e4972e7460ea945c2ed1976d1dddcc3c546f5d449d619c9f9a1a25bcaa1a1d2f4c58d03b511642edbf
SSDEEP

768:RhwOZBmnP/HWDPbCIXswlnwNYH4HAGeETezF3fAo4PIov0Oq1Q:bwO/mPUPbCIXswlb4HAGeETetfJ4PbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/encryptfilestest2.exe

Files

f5cd6510a5fa239aff1edd1a8e0feb02_JaffaCakes118
.rar
encryptfilestest2.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ