005f3f190838d29884b849438c1a71f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005f3f190838d29884b849438c1a71f8_JaffaCakes118
Size

131KB
MD5

005f3f190838d29884b849438c1a71f8
SHA1

79cf6320bc1d939a9566c968244a70ac0fd4e676
SHA256

e6b29ec3092f8f39c1f19cf3922fefe42999e6dd2906b05aeedd46af57732839
SHA512

f9a837a786a73bc41556f5331d519a43d60d43c1773cb5d3d497fa35bff5d7b31fb81d4da4054f6466ab82ffd0ebe96476eea03c4b901d8f30560d47d784f13f
SSDEEP

3072:RxkR5LSU6SH7niFRW5BgNAAwkqNsP+QS6i6DeiPnx7nZ1pRSePuoZ:ISOMigCpkHPjSqFvx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005f3f190838d29884b849438c1a71f8_JaffaCakes118

Files

005f3f190838d29884b849438c1a71f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ1
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ