42bf6422cfdc6bd9798910997f78a197_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42bf6422cfdc6bd9798910997f78a197_JaffaCakes118
Size

502KB
MD5

42bf6422cfdc6bd9798910997f78a197
SHA1

704a4ef952eef166c56f96d722017f933dabf68f
SHA256

3e7a5ff1dbd67df4a22e6bd4420370ad78b72a3b1dac09075f2c13bd7e407b10
SHA512

9568e6895e0e94e49735663c57c3a15c0c127f5c0e013be0c0b00f5d35537305186345f45c7f6642fe95a96e6f6d1944fefdabd0c8348fcd35c02c4975b7904f
SSDEEP

6144:3PRbJtiBLxUuH9h2q1YSusTdKI4C55y7uiiR2QQ7f0ijNY0fAw2YWuVVr/oUIUB5:3J2BtfdF1YS94IzOiPEswweVV8f0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bf6422cfdc6bd9798910997f78a197_JaffaCakes118

Files

42bf6422cfdc6bd9798910997f78a197_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE