29f8f0d6d3e887925ad1b538239d6202_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f8f0d6d3e887925ad1b538239d6202_JaffaCakes118
Size

62KB
MD5

29f8f0d6d3e887925ad1b538239d6202
SHA1

4e4e9515d0986b6ddb2d3e43e9313bd0f79cdd1a
SHA256

ce4ad00961751f68ff24d1af98cd0f9992c92a6719f3870f69bbe989a6addc20
SHA512

ca50874b382d4353c030311110bc172a76fd0dc957b969c5fed16dc4dd8da529dc9507ec86cae8d1207433579b7aa4b8d2cbaa618fa2494aa9ec166b1908c3cb
SSDEEP

1536:ahMdA8dXGrA+b22/b6fKxa2H9aSikyotzLhoB2:aAhi2iH9aSiVotGB2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f8f0d6d3e887925ad1b538239d6202_JaffaCakes118

Files

29f8f0d6d3e887925ad1b538239d6202_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ