05f133a60caf2d82aba08c5d86822fdc_JaffaCakes118 | Triage

Sharing

General

Target

05f133a60caf2d82aba08c5d86822fdc_JaffaCakes118
Size

471KB
MD5

05f133a60caf2d82aba08c5d86822fdc
SHA1

afa6ffd4f2713f6fab3da61ad4745db8a4ae74f2
SHA256

61106fe9d5b7e231b3c6f076069cd4c277b88c0c2248802e2644d683d3fb8972
SHA512

1d78d4aa6e9ab48eeefe816912f20a068e18fe061b83632b9439c9c316e0f088afe30e511ca057005bb0222af7367fa7530f6cf9db6130caa9819bed2261364d
SSDEEP

12288:wqSfQyUbB+tK4Sj0syol5uIC9Wtu6PZf3bWDIFCeE8zNx:wF3UbYSjn3l5uIY6FboZENx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05f133a60caf2d82aba08c5d86822fdc_JaffaCakes118

Files

05f133a60caf2d82aba08c5d86822fdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ