54fe131097ad1ef21cdee8ab8fd48261_JaffaCakes118 | Triage

Sharing

General

Target

54fe131097ad1ef21cdee8ab8fd48261_JaffaCakes118
Size

234KB
MD5

54fe131097ad1ef21cdee8ab8fd48261
SHA1

a3ef1d39bdf7f67409cca110afe7188ae48dbbf9
SHA256

cafd16bcd0c9073a4afa2c57b45c7bd40721a3fd358b49337ffbeb4cfb849d7e
SHA512

af3cf4f184a5848040e91f5542ecb762f096bf3a63d75d82f49b655b2b490affbed67d56893ccbc9e90ac39a6abdb36d3165bfb43c209445b00102fce7a5c65d
SSDEEP

3072:grHEy86mI/FpVBy2g1+21ZDGxGZYHgGiFo6hlQOivDsX:grHEp6mI/FRkDGUZYHgfFokQVvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54fe131097ad1ef21cdee8ab8fd48261_JaffaCakes118

Files

54fe131097ad1ef21cdee8ab8fd48261_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.version
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.version
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ