729d496b459198e91dde94f7ef8737d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

729d496b459198e91dde94f7ef8737d3_JaffaCakes118
Size

950KB
MD5

729d496b459198e91dde94f7ef8737d3
SHA1

5daa2ec98ec7831ea47798538b51441c51c0099e
SHA256

24d9ee0a1a827a5c9027d31b226b6e7ca4af134a4ac079279c6f11afd196cdce
SHA512

14a2b6fe4d8c3dcf18b606bccedf09fd33dbb8607ce8fd4161e5cdfc6661bf9d91daaf792912a4dac088cdb2e0ea5b1247dae659c21f4a92c66c918c1bee4716
SSDEEP

24576:A/NQmKlZT/2gaeJBnxT4x1vJoDaBSurhkt:A/NQJZb27Mx61RoHuS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
729d496b459198e91dde94f7ef8737d3_JaffaCakes118

Files

729d496b459198e91dde94f7ef8737d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

irdata0
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

irdata1
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE