5239b813898eb058d3187cfddfd1c438_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5239b813898eb058d3187cfddfd1c438_JaffaCakes118
Size

36KB
MD5

5239b813898eb058d3187cfddfd1c438
SHA1

8c0fb6cea90c59fd2356f37d581d7ab5e6062bdb
SHA256

07415de92c6b47aecd0880e9d44cf16dca0921f04c57d2a4c49227b36b4a2c09
SHA512

12a9d3384f6ffe90b8d5fc0af98d45d36a48d8fbf63bf32fcdc2bf0ab2eecf4b54f80cd48c945dff24ef67a5b330555395567571c588ac036160b0d3a0c34e3a
SSDEEP

384:eU3pN6voXsnxX6ET7R9hXRuEJvgQmdqXAxTmvGTqZE5K0ieVKv:eUynxX6q7R9zuEWguTLTqZKue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5239b813898eb058d3187cfddfd1c438_JaffaCakes118

Files

5239b813898eb058d3187cfddfd1c438_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 516B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ