42b916206ff520db6daa86f8880739b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b916206ff520db6daa86f8880739b3_JaffaCakes118
Size

196KB
MD5

42b916206ff520db6daa86f8880739b3
SHA1

e657e641b4c004f525b7c20403c499f29f738687
SHA256

439cc83c8b4dd8272d9e5b42265d6a35c2645469f3dbc28c42194ff62b8eea47
SHA512

7cf384e069f9c948197a0c8f6fe4917775e93ec5ba812cb970d3d3fde0c28a334305e0af2f5ea490932bca4efefad8bb90b2c8fdd24af72e93a281d1aa6defcc
SSDEEP

3072:+vzlEIGwhsP0OGh6uuW4R7eDWIMSgGC0SOZjZuache7MPaBESQRq3K6Swrl5:+yIThsP8hHuUWVqC0tE7rMLi6SO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b916206ff520db6daa86f8880739b3_JaffaCakes118

Files

42b916206ff520db6daa86f8880739b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ