29bfa2e7396def70a5f2f85cba42e316_JaffaCakes118 | Triage

Sharing

General

Target

29bfa2e7396def70a5f2f85cba42e316_JaffaCakes118
Size

8KB
MD5

29bfa2e7396def70a5f2f85cba42e316
SHA1

d818b4c2f8dec813c8f05825f898e847d7f318c9
SHA256

5a36381954ec848749b3f624d1cc6aae97152c672a4cc4d52aa3a172702b6977
SHA512

c9eacedd01245f26546b2625507114d254d3606c91c48cef468c4ff2729c15bd1c3ba3a20793f3c08312becb625c595f7d37898384c2e8ec53e7395a41eb89e4
SSDEEP

192:EaoLsnOUJ+1BWxaWObWnoHZgj8x0R+yeEi:kSDEjdWIWoHZ09li

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bfa2e7396def70a5f2f85cba42e316_JaffaCakes118

Files

29bfa2e7396def70a5f2f85cba42e316_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ