42625ccf98463cdb3fb68e4fba41d245_JaffaCakes118 | Triage

Sharing

General

Target

42625ccf98463cdb3fb68e4fba41d245_JaffaCakes118
Size

62KB
MD5

42625ccf98463cdb3fb68e4fba41d245
SHA1

18555aaafa1dff86405f05ae84db84b9aff9acdd
SHA256

17b50d279839c767d6e13548c8fb5566381a7c291bd1b418c82fc842de66f36e
SHA512

dabee7fb9c962f5649fb9ae742e613ad3744625e44b33ccaca00f62ebe2abd6ad3654df073348969edea9b592b395c750f1f8639c55d5ba32fbd0426ca9d3dc9
SSDEEP

1536:7j8BLypAx3k6zk8eBBEZf/hwLPQL4IMetf9cDjB:yJ0BBEZx0P+v7tfMjB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42625ccf98463cdb3fb68e4fba41d245_JaffaCakes118

Files

42625ccf98463cdb3fb68e4fba41d245_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ