554a40086f777374213322798dd52442_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

554a40086f777374213322798dd52442_JaffaCakes118
Size

833KB
MD5

554a40086f777374213322798dd52442
SHA1

57700cc351a1b9c706c07af8bffe46badc8282bb
SHA256

55478da1911de17d1e0214c73f846dfa7fca8cfc1e6185d3bbd4c6a66645d0ed
SHA512

dbb696349abbb5ecf96216350a4dffa4ed207c0f0e8d138bae4623eaa1440ff0623f6bc7cba42fc326dc63c1f2360af9f5c6ba69966761ffbb6ecdbf6d60485b
SSDEEP

24576:fyKKrsHFg+g4/zEJOTfbZ4A1WatrVwgvQk2R5:6psu+gszpPZ1HSk2R5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
554a40086f777374213322798dd52442_JaffaCakes118

Files

554a40086f777374213322798dd52442_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ