52a15b8ff491d82c146344c50770a341_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a15b8ff491d82c146344c50770a341_JaffaCakes118
Size

227KB
MD5

52a15b8ff491d82c146344c50770a341
SHA1

161b482096c64c40f90b5cb10a513d3276ee7d9e
SHA256

cf12a0cfe91e4de9c04b5aa87cd175130c272d05512fc3ec9a19bb6dc9d4ca45
SHA512

620d137b220d4071d8aa782bce2b80e85bc5bd25794690d903065374f48a7edcb48767c4f720dad284987447beacafcf2e6ed85279ed060a98e00f9a5fa35f76
SSDEEP

6144:zxSpmH2f/Lg4wPCqOK6kLxvXYql7FhIoxifOjrrAqw:dSpc+LQtIkNQql7co1Hnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a15b8ff491d82c146344c50770a341_JaffaCakes118

Files

52a15b8ff491d82c146344c50770a341_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 210KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ