055deefcee124363c982d20c99264518_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055deefcee124363c982d20c99264518_JaffaCakes118
Size

317KB
MD5

055deefcee124363c982d20c99264518
SHA1

ec2449e21c2f2300900c470b1ea9a6b0e58d9509
SHA256

78a0efc5f068a5309c5d6a1c749b05ee323d4c94638e2f0b21df0a67c1bb50cf
SHA512

91ae94f37bc6aad221fc497dfa2c2dc9b8eb6434cbf8e79c7cb6ba0163b79b90eb85786068d24f7dc1f13f7537c4a1d49a50f0a6a1fa556e9db49d99641647b7
SSDEEP

6144:0qp1EYJw7rZ9s4qQXvvSD0s4qQXvvSDoNhMJBFX2aNWZFomSIMEi/teSF3jqCj:7pp0F9s4qQXvvFs4qQXvvFaVDOFomS+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055deefcee124363c982d20c99264518_JaffaCakes118

Files

055deefcee124363c982d20c99264518_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE