42a541e444815d011667e3c8ed1418da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a541e444815d011667e3c8ed1418da_JaffaCakes118
Size

507KB
MD5

42a541e444815d011667e3c8ed1418da
SHA1

9337221e0d66d1284493fa19e3cbe8be9bbf14f0
SHA256

a6a5ea30c3f054f09c747563c91b941f091266dc5720a8cf445ee4ea755a9473
SHA512

34fb5c58e171b8994ca1bcade3221c59c992891ad1c26cff7ab45f4f45140191e9a5ebd83fb9f8cc81cdc234eb2158729568e6c98343e889e24aed539be428fc
SSDEEP

6144:9qte9XdA/KzyUWgNQ7m8xnx863dnWyAMgb0l6ANwWAtseERhqf3x7OZ3zulwOql:xXdA/pU1NQ3WyA3rSwBtfE6fh7OjulO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a541e444815d011667e3c8ed1418da_JaffaCakes118

Files

42a541e444815d011667e3c8ed1418da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ