42a3368e2d2bec9171bbb560d3639929_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a3368e2d2bec9171bbb560d3639929_JaffaCakes118
Size

487KB
MD5

42a3368e2d2bec9171bbb560d3639929
SHA1

86176a22a816475e725f7f855d291491d352d08f
SHA256

cfad8d2aee9532ce3e8e0a605a0d7ac9caefcbe3e72b8b24354eddad124ccf33
SHA512

583cb95a4aca2db2fc5bc4d79823d6e646abb765df83aabaf0f32401ba92b8c0c7abef1dda53dc97c4b4a5b37c65c3836955332cbce3ed8f1d019e9acf34e71f
SSDEEP

12288:C5lndfW0A1zqbhLuuHf8C5sxDlACGLRGQM:ids1zeEop6xDlJORR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a3368e2d2bec9171bbb560d3639929_JaffaCakes118

Files

42a3368e2d2bec9171bbb560d3639929_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ