29e733dfc2e0c58bb18c4a79c50cfc9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29e733dfc2e0c58bb18c4a79c50cfc9c_JaffaCakes118
Size

82KB
MD5

29e733dfc2e0c58bb18c4a79c50cfc9c
SHA1

980d246e742acf46ad50ee5b07c510e197dbc4db
SHA256

29d6d08f755365f57d0ae09a40007dfcc9b221947dad7daa5f088574819ec506
SHA512

af0751680969be78ba584e893e9c7f00390570ee8c373d60ea3ec962898483e6de429dbe7d9ee3c32c4a904a7dd27b730fc960c7c0dfdda9c53616f285019a10
SSDEEP

1536:vm69n24x1XDhknp0YrPnkc04TJL9h4cSanIqLDXujxvUJ:D924jDhkpRrPkc04TJ5hRIqLDXulcJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e733dfc2e0c58bb18c4a79c50cfc9c_JaffaCakes118

Files

29e733dfc2e0c58bb18c4a79c50cfc9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ