29ed8f37c74a765d170a5f0b6ca1d8a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29ed8f37c74a765d170a5f0b6ca1d8a5_JaffaCakes118
Size

35KB
MD5

29ed8f37c74a765d170a5f0b6ca1d8a5
SHA1

2aa84cb4fa20b738ee5db0b9e9c3f0063e9568a3
SHA256

6f485d982536952b1770a35f965856f5993553b0b930b38c50347354144afbe4
SHA512

e7bdeaf06c46af11ae582b5614513940195a7cf6afcbd21b8a39ff823a5f9fe4cb2ec27addee6d9b31c89cdb756fe4ca7f25179930fe881f30d0ca1d0194937e
SSDEEP

768:EVdtcAAayQ6I6Ro1dwwGl8940Xq3jk3nhOlO:EGAC66Ro/4iq3jpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29ed8f37c74a765d170a5f0b6ca1d8a5_JaffaCakes118

Files

29ed8f37c74a765d170a5f0b6ca1d8a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ