05957423e3f0c1836734f9270f7925e0_JaffaCakes118 | Triage

Sharing

General

Target

05957423e3f0c1836734f9270f7925e0_JaffaCakes118
Size

325KB
MD5

05957423e3f0c1836734f9270f7925e0
SHA1

c0e5c437fc7cd673ceb421ed22073b313522da66
SHA256

a963bddd8d59423ad8cce205d83e5438eca2c54c13cb938e27e1e1f92d4621c7
SHA512

c491de182155b85a874adf48de3187bb1036183432a7a69c37dc5d7ed9e23c1c8b0631d9008e6f898149d161bcbf5266724b22724cea7500fcce74b0c3065a3c
SSDEEP

3072:AHL7bfhCAu+lIH0qH8sJRl7aUkUVpdVGU+/4COGzoJuvZAHo2SkHnaMF8Kp6Qx/Y:ohCz0qHPT19cw4KHP8Y6eYCUGGM0sM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05957423e3f0c1836734f9270f7925e0_JaffaCakes118

Files

05957423e3f0c1836734f9270f7925e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 250KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ