292db16d0473c827a6044944299daf44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292db16d0473c827a6044944299daf44_JaffaCakes118
Size

844KB
MD5

292db16d0473c827a6044944299daf44
SHA1

e14fee4dfda4049fc2887843860499c6d7b2410f
SHA256

b136a787dd7351b47b50aa04ac5f1a10d659265316ba15a69a23abf7d91e0287
SHA512

f24a5abb077b17589ef2ce88c5ed28af72e6c4d550a1b17ca0d20141ef5c5dd8cd67a9173926b38f8797d0a3721fe99b8ce178401bd6ede2388a1269de2fc983
SSDEEP

24576:3nTLkCg3Qri/6biAwn4eCQlu5Ba0YvFBpF+B52eeKldslm:XnkB3Q2/RZ4eJlu5BNYvFBGkeeisE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292db16d0473c827a6044944299daf44_JaffaCakes118

Files

292db16d0473c827a6044944299daf44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ