05dead40e1023959aa99776db77d7c6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05dead40e1023959aa99776db77d7c6c_JaffaCakes118
Size

195KB
MD5

05dead40e1023959aa99776db77d7c6c
SHA1

6afc07c69425cb91a84ed77ea32d308e9a393dc7
SHA256

f3a333527eb317b4f8775ab15623351709eb1befea83a0712a354d1e5fadbbc0
SHA512

e3313a8d5f492fb205fae02584cc60c68ae8aae47a4fd3937de4a7455196a772fdbc30746b83312e7e541493cb6ae050d6fc9992cf2b978768b7c1bea8ddff1c
SSDEEP

3072:CKMopTVbFOeXkpCKT6d1yxePeAFk3c1HGtw1KEn5dV5hlf65cLmv5xWk0O7jZJ:3ZbFbXk006ry8WA2lw1r5dVpS5BJ0CZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05dead40e1023959aa99776db77d7c6c_JaffaCakes118

Files

05dead40e1023959aa99776db77d7c6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ