42cb1ad6457cb8e02b2f0208ff129923_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42cb1ad6457cb8e02b2f0208ff129923_JaffaCakes118
Size

904KB
MD5

42cb1ad6457cb8e02b2f0208ff129923
SHA1

a9464651d412573f0f0cf73ae6f409bbd6f5cf50
SHA256

44392402ee0ed2f1550a3c4d93194d80994eff5ddd8e42b5a38a8d704b7225fd
SHA512

8aca65b11c0fe2c3d5272bcc9e11451cae1fdb44ea5082c4b14097dda00c179a053fa7bf22edd3e8790d14bb727235ae9bf724144582b6daef15a65828cb6b69
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqk:hWtTBdsqEPxjjoFzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42cb1ad6457cb8e02b2f0208ff129923_JaffaCakes118

Files

42cb1ad6457cb8e02b2f0208ff129923_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ