54156690812bf16928e4916851fecb58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54156690812bf16928e4916851fecb58_JaffaCakes118
Size

94KB
MD5

54156690812bf16928e4916851fecb58
SHA1

ce997d925f1ee0d6b3c1126ecff26eab95aab85c
SHA256

a494e4b774e5d3aa6b6682d133290a7a0afd43fc67e0c2a744e67c8272cd2768
SHA512

aaf0b65f1aa3f7472542c2badf3e156521acef8c07a9c7d82058bea1fdadfa5c0b58cb80bf65b392e9a548f451b1c760f02a43d98c898d3088357aea19aa6b1d
SSDEEP

1536:wbO889LGH7zi16xGTtnY1iHxwdyPGLOlGSOB73Uq7PcQPKrqq+XhL:wa88dGHyYDUGrSm7H71PKuV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54156690812bf16928e4916851fecb58_JaffaCakes118

Files

54156690812bf16928e4916851fecb58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ojec=segments1

Sections

CODE
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ