f5e508e2e3852a25dc23362594842d23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5e508e2e3852a25dc23362594842d23_JaffaCakes118
Size

179KB
MD5

f5e508e2e3852a25dc23362594842d23
SHA1

2eae7fd005304fa9c81cec3d54dee02d7c7b45a5
SHA256

ef0ef32eccac122c39a0c8d35e9d4b011f2260d436fddaab2cfef7411706bf25
SHA512

a8d7542978165be192e2d0a0cc10b6b60b50a9c5b2d1996061e9c26cf79f06824ac8db8c4f345589670905f9d19bcd1147035e7c2501cb705d98cc914fead01f
SSDEEP

3072:QniPsgiosKNeI1mvQFIynctUe4SGAQS+KwU5doiASeQT:OiPQosG1m4yVtUe4vAQSTHMifT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5e508e2e3852a25dc23362594842d23_JaffaCakes118

Files

f5e508e2e3852a25dc23362594842d23_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE