29bd43267fda597d4671fdeb7d85db92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bd43267fda597d4671fdeb7d85db92_JaffaCakes118
Size

69KB
MD5

29bd43267fda597d4671fdeb7d85db92
SHA1

2d7a4d7a8f438fc8b78ac3ec3bb998302b37fec3
SHA256

585e2343b4c51c7c5bb8687e4847eb25c69cc71756fde683a829089b27f46fef
SHA512

f175fc02216412c939765bc387aec2f58905d87296c4a0d757f63d795d6122093b3cc9812f7224b12461df3fc4af607a95c055d015facd7ef60127d22419fd8e
SSDEEP

1536:OsaK2+OUXsTIBzJI3LwB8osGzhyhLCfD4FNcB3MOQUgnlFK:OdK2+zREwBC2hULCfDsNcJuUgnLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bd43267fda597d4671fdeb7d85db92_JaffaCakes118

Files

29bd43267fda597d4671fdeb7d85db92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 65KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ExeS
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE