054ded2079b376f098b67ac055f42559_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

054ded2079b376f098b67ac055f42559_JaffaCakes118
Size

563KB
MD5

054ded2079b376f098b67ac055f42559
SHA1

651cc34945907becdd2f012d640d8dadbd2fe9e4
SHA256

1fd6290c08e191c11c2dc8fa1bc001092cd19d6b3ecc96d3dcbcc46003546881
SHA512

2d5418cec5a7b3e71b5dd5cd78afad5dd5177cadf0788856ed57bdb58820d8d591dab4a3ca8f1652951fca656a63a3bcfa449d1e45f452ec774ba01112d43eb1
SSDEEP

12288:xeBrbapO6LiYuBGFURrnfgVEUIj6Fe31hhTJgOh66:xGbsp/ofgVEUIweDgOh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054ded2079b376f098b67ac055f42559_JaffaCakes118

Files

054ded2079b376f098b67ac055f42559_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 584KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 531KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE