29735a408e81786b6c23003efb0f124b_JaffaCakes118 | Triage

Sharing

General

Target

29735a408e81786b6c23003efb0f124b_JaffaCakes118
Size

248KB
MD5

29735a408e81786b6c23003efb0f124b
SHA1

7c7d13cc847de70e2331e63b01ea369789df5d63
SHA256

5db469e806b7fd980341a070748939341e71a82717c6628e00fe89eb6d8d015e
SHA512

eb13a8138e39d9387f34aeb54f6862ee80f9d6c9e1ce93ebaa355be2b8805702d1072e6f4934f5c8e1ee4a907951dca5f69d02be93554c8b858873478b4b3ce2
SSDEEP

6144:KD4nDWgRAkPzQiYEh17pZiEK0z0ycCLE4UoZ5pW:PR3Pzr3hUEv0yDEUZ3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29735a408e81786b6c23003efb0f124b_JaffaCakes118

Files

29735a408e81786b6c23003efb0f124b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 230KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 140B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ