29305f390eff51239ce85c872a5cb0da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29305f390eff51239ce85c872a5cb0da_JaffaCakes118
Size

84KB
MD5

29305f390eff51239ce85c872a5cb0da
SHA1

6d92483f8e0a83192dc7114a6b2c4e8b679fccd5
SHA256

f29dce6afaba86506a24e0f8ed91886210b24460c7782f41f29d67476108ba5b
SHA512

828dc1938d1996216c99ce204b0eb2a6acabe61da4c43f0b9b5597ab2ba29242ad6125cfc79531695d24a7c5f73abd8e1c29f7359eeebd2c7a98fc57a860579d
SSDEEP

1536:EcJTXIYXcCvfA2p2nNWs5cpvLf0xEE5HPZJI:FYYsufhp2Us5cSJ5HPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29305f390eff51239ce85c872a5cb0da_JaffaCakes118

Files

29305f390eff51239ce85c872a5cb0da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE