f29f02c7c5f0247722703db3345892f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f29f02c7c5f0247722703db3345892f5_JaffaCakes118
Size

385KB
MD5

f29f02c7c5f0247722703db3345892f5
SHA1

4f6aae9066d6457dacdb3df7afcc29b6087d9d66
SHA256

78b9fccef9b648709fb1bde324c2ffe4f129d8bfee71e2e5bbd33a6c563541a5
SHA512

1f1fa9479964c4021475c96ca7a2ff48d21dd13612d58ea688a9c6ba48ae3b54821568b0ad81c1e53f3a6491903d4495e2e08e9a342f5e05808cbe1e078a66f1
SSDEEP

12288:z6iWYgYR+rL/hLPItYKdUJrY7fyk9jCSiwY9B:HW2gThLuY2SuTY9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f29f02c7c5f0247722703db3345892f5_JaffaCakes118

Files

f29f02c7c5f0247722703db3345892f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ