29e5a220195532f9bda28ab2ecef63f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29e5a220195532f9bda28ab2ecef63f1_JaffaCakes118
Size

396KB
MD5

29e5a220195532f9bda28ab2ecef63f1
SHA1

6ba2e7f2c8b4c864c66d030ff25c63ae2a1e41cf
SHA256

cca5f48a5cb10332decbbb8795fc3621170333ca71b4c0604b0b9de54c77e65c
SHA512

a1ba72da9463b58ddab16b62e8fc50e6ad74c26b1ec42a92ad2c067658ee3c7d6906f0e2d001db38db7668365c5a9614ef2c511e9d7492824f81055022a419d0
SSDEEP

6144:Kp9S5HJZTDTkhpG6qTGRyMgi8/nzfg1+KZvy9CZ20a/9XgguQBAVP2Ir:Kp9WplDqGxKxgrMYKy9+AggF2Bh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e5a220195532f9bda28ab2ecef63f1_JaffaCakes118

Files

29e5a220195532f9bda28ab2ecef63f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

��S|�
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�U]��-7
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCryptor
Size: 88B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ