42f62326fe051442af9a28eb8e1a3088_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f62326fe051442af9a28eb8e1a3088_JaffaCakes118
Size

84KB
MD5

42f62326fe051442af9a28eb8e1a3088
SHA1

a4b0b2aba3f0414609dd64c7ada3700fa5994d6c
SHA256

dc45a2e630e8060053585d9fa29a34b853d0a90dcc4fa17648e51dc852f69198
SHA512

e4afda1daab17d6a3f026794a33b03ed6aa93786bcf906b59cf90a7c5849ba643c4528d37e4ce25ed4370cc56ecd3b272cb0b99aa5eab2cd8f6d2035b6e7ccbe
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzGvxuwVRiwNFfPUA:lV2BZVPlFlnxClFvLLcA+sPDzGvx3NFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f62326fe051442af9a28eb8e1a3088_JaffaCakes118

Files

42f62326fe051442af9a28eb8e1a3088_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ