42eb436d1a41f481a79dc52d1c986e06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42eb436d1a41f481a79dc52d1c986e06_JaffaCakes118
Size

59KB
MD5

42eb436d1a41f481a79dc52d1c986e06
SHA1

6f46467505e3a45637fe166d832bda39b8b61bd7
SHA256

8cde327e22e0013b915a05b61184158498b0100a60de13599d1bd17aeed0de4d
SHA512

e8e69a569cc0c77b6a15eee2d6272073810299e1c32b76b7ca6265c060c7f20672383b2d79ea0ba4a46dbf207ccf828ba61c153b666aafb733fe6dd6afb43e40
SSDEEP

1536:VaqaQ/8ttXhyHbST7m4T8FEfr5tyRuDlL:Si8XhyHbaT9rm4DlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42eb436d1a41f481a79dc52d1c986e06_JaffaCakes118

Files

42eb436d1a41f481a79dc52d1c986e06_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 808B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 132KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ