5493fd5fa9e48ce08b91ba4977f32325_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5493fd5fa9e48ce08b91ba4977f32325_JaffaCakes118
Size

787KB
MD5

5493fd5fa9e48ce08b91ba4977f32325
SHA1

e5bbe4b3f659e5c70d1b468b89bbf6eaa86989c3
SHA256

61ad14eafdc91e0e19c1df6bbd8a3e60771959d5c3ef3ce05b4563fb442e1dc6
SHA512

83ed5c0fde6481e0119cbaddde6bef402844eddd555baccd4da48f90ff9c3254cfadcb1bb228e470bda2465163cfea3581d1c4538f70ce5ce745e483bbafd45b
SSDEEP

12288:2XBlT28yO2nipLvLF1M3HOoZNHEaSCXynYc1cWUcAsd+GKSnX:OF5siNZ1EOwNBXynPvUhSn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5493fd5fa9e48ce08b91ba4977f32325_JaffaCakes118

Files

5493fd5fa9e48ce08b91ba4977f32325_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 158KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Fz�
Size: 600KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE