54e088691b2b1a9ef81d426c3c30d2ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54e088691b2b1a9ef81d426c3c30d2ea_JaffaCakes118
Size

147KB
MD5

54e088691b2b1a9ef81d426c3c30d2ea
SHA1

eb0555c2d947fc19b2d7865665b45d385c9594f0
SHA256

79328a5b10e1ad946a103dea32fad00b680330e2d4a51807e375f94502ffde7e
SHA512

35a675c3ee46b116348bd1b575b4329ad017eb267b99a3ae4a52c6b06f30c8baa5b7f7d27f8128d2b38ba8af5780be7a24dd0c5361f62badb355d526ba711f41
SSDEEP

3072:K6WjjmRE61z1wKKZhB0E+llgdcuDkPO4n9+HrfZR2DF:zWj6RE2zhKZT+llgdcuwG49IZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e088691b2b1a9ef81d426c3c30d2ea_JaffaCakes118

Files

54e088691b2b1a9ef81d426c3c30d2ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 140KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrcu
Size: 5KB - Virtual size: 3774.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrcu
Size: 512.0MB - Virtual size: 1734.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE