2829b8227ccb8a99513b116d50316e40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2829b8227ccb8a99513b116d50316e40_JaffaCakes118
Size

764KB
MD5

2829b8227ccb8a99513b116d50316e40
SHA1

bcaa59e05aff439a700ca909e43b34bc4355d28e
SHA256

bc28f6ebb95479f5399db9ba240497cf2c94a1d765a2a24fd6c3fb39ec6e3b04
SHA512

dfc267a4ab248492ca24632b6460b61c78e913aca6daf319e4d9a6a4050e23e0e8389af82f4736ab92eb2f2426388a25e7dbec14dea225da599f0f50b922eb87
SSDEEP

12288:dB3N3L1mbe0YtzQQDyLHNV8kYqOO41RHnnvySuzRQXpxUS9EbVZuNaus4WXpKEH0:dBd7F0YtzByZV574Tnqn/brYaus4sBAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2829b8227ccb8a99513b116d50316e40_JaffaCakes118

Files

2829b8227ccb8a99513b116d50316e40_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 656KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ