42a86fc5f3964cc2b6fb699635757a8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a86fc5f3964cc2b6fb699635757a8f_JaffaCakes118
Size

616KB
MD5

42a86fc5f3964cc2b6fb699635757a8f
SHA1

6fe06022079c3be6e3f82bba0f9ca18602ff2941
SHA256

854959b1d6e0923e6bd86b2025b21d35ea172c83025259576501bc83a857cd30
SHA512

4715bf7ca9fe676aaff0b88eb334ce59ab6c30a1ddcf9541add53505cd4e31cea8acc054bf501553376375cdac155962650f20885d4ad15f5b5c2b5d1dca2d13
SSDEEP

12288:/Dvmn9j7OmEkfocAi0kq09fSM1n1j+KooAy5LQflr9OzypBRx6b8:/i9uHkfoc0909frn1j+K7HC990GB6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a86fc5f3964cc2b6fb699635757a8f_JaffaCakes118

Files

42a86fc5f3964cc2b6fb699635757a8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ