242e94c3b094985fe71bab6db51ef036_JaffaCakes118 | Triage

Sharing

General

Target

242e94c3b094985fe71bab6db51ef036_JaffaCakes118
Size

1.1MB
MD5

242e94c3b094985fe71bab6db51ef036
SHA1

d77dd73bd8122c0aed80875b7a081aca0b614199
SHA256

72074215be07260ffec2557ded6c304eaad73c887249dd66ef861c7420631f94
SHA512

3092c30d00d2a911ceadcbd167d0c814ca2ed075446a6c8e78abe3c13ae645cc54b3b969be0263a40d50e4aa5e96cbd2ede8077784e185067f1740fb9d50c61e
SSDEEP

24576:JB7rRMkRI19MA3rXycWhvl9yINhWM1b57x+ZW:JkP373WrPWc54W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242e94c3b094985fe71bab6db51ef036_JaffaCakes118

Files

242e94c3b094985fe71bab6db51ef036_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 809KB - Virtual size: 809KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ