42595d844eea6bc77fada202199a9c05_JaffaCakes118 | Triage

Sharing

General

Target

42595d844eea6bc77fada202199a9c05_JaffaCakes118
Size

1.4MB
MD5

42595d844eea6bc77fada202199a9c05
SHA1

79408b04d3e1408abb0b547a3169f05e1a6c69d5
SHA256

cd15a5e8e3386719844ce5fafa62c4e341f1121d488362e348d23bb5edff28c3
SHA512

dd652d51dd017799b6ac06b018bb9325482a14c447518cb0d09002a52decf1ab50492abe5a0aa0aca943435294c81f45573688ae0becc2e51716d5841d9e8ac4
SSDEEP

24576:5nqjAz4thuvaeeVtSUgBrWvb00d60z09AfnJl:AjAOEaeIj09AfnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42595d844eea6bc77fada202199a9c05_JaffaCakes118

Files

42595d844eea6bc77fada202199a9c05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Sections

CODE
Size: 416KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 976KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE