42ecc6c6086c639569df7e4b028adc71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ecc6c6086c639569df7e4b028adc71_JaffaCakes118
Size

285KB
MD5

42ecc6c6086c639569df7e4b028adc71
SHA1

c0b4551d38a596c76fc566cbe5376f75a548caf7
SHA256

62acbf3514ad6b58649f789f3cdf3e15c61237d9a2979653ca919d73f0fda246
SHA512

d3a6686f9b17599d2c364ed85f894595945e57e6af92e25c7df470abb89ebb00788ac505982b950ac84e08c463a9a22931f2dc2327fc9931b9d613b3a0cb63d7
SSDEEP

1536:1XpMPuRjAgGEGVjGB89DLReEB4MkOnT+omChOoF1vNdRPtt+TB5KtBjWiK1LGDLc:1XGmA35BLR7+MB+horNnAgtrK1LGDLlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ecc6c6086c639569df7e4b028adc71_JaffaCakes118

Files

42ecc6c6086c639569df7e4b028adc71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

trtme
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE