54095057dcf1965010c9198a3776fdfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54095057dcf1965010c9198a3776fdfc_JaffaCakes118
Size

15.8MB
MD5

54095057dcf1965010c9198a3776fdfc
SHA1

b0f95b76c5de0c5d6e6e466b946f774efd2d1c02
SHA256

139de20b42199a741bcc1b9a3199712c0e56106798090123159f0b7ecb630baf
SHA512

d09332e7e4d1b85b533e524820845160f355537a317e4bb016001a4726b7be94e572395ac994008e2c3cd0a0f682c8e2dfe9a05691de1be5eb94c93e883bc0a9
SSDEEP

393216:iwjGs3DjlYoHABJXem7gHKxBCiSyAu6vKEPPO:+8jRgqLliShvvnO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54095057dcf1965010c9198a3776fdfc_JaffaCakes118

Files

54095057dcf1965010c9198a3776fdfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 946KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 394KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ