5397efe6048a4b2fed58743e39bb8395_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5397efe6048a4b2fed58743e39bb8395_JaffaCakes118
Size

21KB
MD5

5397efe6048a4b2fed58743e39bb8395
SHA1

9934d4ee11e65d607488cb5d9c2fcabc0ec4fe75
SHA256

62bb9bad829cb8794cfd79072fac2975717010e79836e77110bf852c512ffbc0
SHA512

215c462bbbb3bcb005d8e465aa68eba0f5c4964502250158df5151ad8511998e917e3998206d1dad514a65b84f855cd1f2717badb9e04bc17d2467fe236c3a38
SSDEEP

384:eQ5sJQAvhj+MhNyn+E6hxMTKvGKT3dIQz/rYr4bJ/q5l:LSQunQnfz+1XYrQJ/q5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5397efe6048a4b2fed58743e39bb8395_JaffaCakes118

Files

5397efe6048a4b2fed58743e39bb8395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ