f5f523cef12f4af09dcdf4c46ee6459d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f523cef12f4af09dcdf4c46ee6459d_JaffaCakes118
Size

276KB
MD5

f5f523cef12f4af09dcdf4c46ee6459d
SHA1

5d56c29cdf5f1b9de8458004261497521852dfbd
SHA256

23af51d186e9675171a873c36019eda3da7b0cd52ba6515b2e57896502c56915
SHA512

34c4179b40d1d0ea49052b805adf1cca7d70f0e2dfffe74f44769ecd18bc010f580a5004a692a099f8a261207d2c9191591d3cdbe85c8c22976e709535c0243c
SSDEEP

6144:suRhCXigO7s79BAzBLhoa9zbZd2GxFJLXqo5vrDEpU:HhCXigO7HBZ86JLnvrDEpU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f523cef12f4af09dcdf4c46ee6459d_JaffaCakes118

Files

f5f523cef12f4af09dcdf4c46ee6459d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ