29c107328358ccbda902f4199dc5b972_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29c107328358ccbda902f4199dc5b972_JaffaCakes118
Size

270KB
MD5

29c107328358ccbda902f4199dc5b972
SHA1

57951515149b3e9cd56f98e0af366dfd647d2b58
SHA256

c535f32c57aa73bb570c8688f86d737756526683ed9f71910153281fdde2df30
SHA512

e0f45f2cce58d5daed072c83b734ee409a38fa1bafea6301a6a8e50400799364d17bccf0e89516014a9610815477240d79b2c7164146573d554d0e5b8c5498cc
SSDEEP

6144:DmMzaDPIdvhYX6jhipVco0nl5fkw8DQfKJ6wbIkAV0i:DNzaDPIdZXjkpyo00rImi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c107328358ccbda902f4199dc5b972_JaffaCakes118

Files

29c107328358ccbda902f4199dc5b972_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ