42e6b3437725efa30d5405df18688a40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e6b3437725efa30d5405df18688a40_JaffaCakes118
Size

83KB
MD5

42e6b3437725efa30d5405df18688a40
SHA1

33c4ea1e99d3eacf6bfeb90dfdd54ad7b1163a0a
SHA256

583b8ffaa5da11e8249bf00211ec6d936225a59cf5041d19627ebf1890533121
SHA512

a0440181c122483df2dd15a89922956ea7b62673a8d6eda32428ed054303adc4fbab4471cb3f5c059d709d99c5c533f947894c5cb00ea01c192157e6501add10
SSDEEP

1536:bUQ8ZuXCuu+rmnyKXHbWt59aTGmD95d3VY0GqfrbV+LkicdOr4PVgFOUXU:bUQoQKnyaHi943rdF/VQ58UXU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/hpzavista.exe

Files

42e6b3437725efa30d5405df18688a40_JaffaCakes118
.zip
hpzavista.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ