54b982aa3d0e96a8c12f404c49a50ccb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54b982aa3d0e96a8c12f404c49a50ccb_JaffaCakes118
Size

1.6MB
MD5

54b982aa3d0e96a8c12f404c49a50ccb
SHA1

e222599edfad3b4558d5a9b5f7b1c7221ef69378
SHA256

72bfdc906015d9dfe59f0bcd2990c29c5dc0a9aca6eaf3696bbe0175ea7125c9
SHA512

558f323297fc809164f55cce6262f25c00b734dd23eef7cf39ba7a9d63bdd9545cdc18492fc6e1776d0fcbb9caf53a428aaf7504d33e0697162b142fb885099e
SSDEEP

24576:Xnr4rJf3Qz4x4njHVeKbLovhPkAiwJLeX+u4PILM1RT6zGQgLJPneoirBB6ch0oz:Xnr4pQsunrzHuhiNX+HPscccPenEhoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54b982aa3d0e96a8c12f404c49a50ccb_JaffaCakes118

Files

54b982aa3d0e96a8c12f404c49a50ccb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ