42eccc040aeb3c82304239775e484278_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42eccc040aeb3c82304239775e484278_JaffaCakes118
Size

403KB
MD5

42eccc040aeb3c82304239775e484278
SHA1

c8eb949a8d4be0516098e43328bef43e56b22996
SHA256

365f1ccd49530850a203ce7071d29b1de2ade3cce7ca5a635653396af74ea7e7
SHA512

741c3c5f52b85693e7667200cbacfb5879c9f32700a6881ac62c4dbb4fc3adc23c733b9df2c2d1c85f192ecef1eddf56588cc393868d5c98cf09890428263ffc
SSDEEP

12288:hc+mLuiTzueQCD+V2m5Y1oMhaM+WIBCba3:hc+6TbAPCoMhENsbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42eccc040aeb3c82304239775e484278_JaffaCakes118

Files

42eccc040aeb3c82304239775e484278_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 14KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GotHin
Size: 383KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Homiez
Size: 100B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ