29e979fe2e84db5b77e2c1dd2253abc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29e979fe2e84db5b77e2c1dd2253abc3_JaffaCakes118
Size

512KB
MD5

29e979fe2e84db5b77e2c1dd2253abc3
SHA1

efe59f66fc9ab08ee01030230613058460f2c29b
SHA256

2bcda4603c39480ebc8bc3412a64a28a56f882cb82ea44099826adf9885f7c3b
SHA512

11c0611667d597df72e0a3c3fb42093698baaac6ba1f0842a0752bb7aef221bbd7a32a4ad8c9f1f43c8b3e89ae0372ab41c29236f3227fc57a7550cc0b8428c7
SSDEEP

6144:ISkoCFhoHJGbrW2CtdqJ8VeIUOInpnTM4w2SN1jhNeAjfGJ:INZhopGbLJ8VeIUOINlw2SN1PeATGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e979fe2e84db5b77e2c1dd2253abc3_JaffaCakes118

Files

29e979fe2e84db5b77e2c1dd2253abc3_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ