5569861b73e8823b3480cd269a87befe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5569861b73e8823b3480cd269a87befe_JaffaCakes118
Size

484KB
MD5

5569861b73e8823b3480cd269a87befe
SHA1

4a965657d9157a9d7bb7ca113286f7967e89031a
SHA256

699352f8bdf4def9b36a5b0e820523e4c51e0326e6fa0c74e84fff237fa8e05b
SHA512

2aeafbf9f9b505a92f91cafb3e56272b58ace334ceaf0910156171a91d54c648b7362eeef442eb224a77b1492577fcbee93b1805e83e94f25c933a4424d4a6b8
SSDEEP

12288:g2UWNk6ttk/sCJcLlGN7C6aAoO2ypbbuRX:g2Uj6s/5ylY7AAb2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5569861b73e8823b3480cd269a87befe_JaffaCakes118

Files

5569861b73e8823b3480cd269a87befe_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ