42a2c16a620f2055a86a05358a09ede4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a2c16a620f2055a86a05358a09ede4_JaffaCakes118
Size

2.6MB
MD5

42a2c16a620f2055a86a05358a09ede4
SHA1

2f81c2321705c0d18a1acfdd61d6a81d3f78615d
SHA256

1df3900d4d97d37046f48211974eefd7847893f2186d9bd270fb46f4dfde5b9c
SHA512

b61d949dca3be84d458c1837ba226146d3c2d65b962b9c6e50279211d529df0f43cdaf23434f1780dc98ec5d3adb4d8ba3e6806561bb3b72d7cf857018e7818b
SSDEEP

49152:Mv4fBfe8lHDW6EoTtw6XQV8O5mg/URPap+/si6C:MkBVxDMX8YF8RP9Dh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a2c16a620f2055a86a05358a09ede4_JaffaCakes118

Files

42a2c16a620f2055a86a05358a09ede4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 860KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ