742d0724ff5050829277900e5fc8650a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742d0724ff5050829277900e5fc8650a_JaffaCakes118
Size

209KB
MD5

742d0724ff5050829277900e5fc8650a
SHA1

a30116d43b60484d0e2b98c27224331de35b3deb
SHA256

0c5ee9c51b92c90907ae09cb3d7086a502d66f076306b2613bb4582687f933f5
SHA512

9ef676f95e70b800e8834d3c16f3037f6aff9c0f28754a855832616c946804e7fbe20e95fd87a591861e2badabe7faa4d46c2c242fae4438a6c8d38e5682b07f
SSDEEP

6144:DV9Ywg6G8hOrMp/lz0v2bxKQ36LGu9RLDHLrlE/m:po9K2t2VZ36C+PLrl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742d0724ff5050829277900e5fc8650a_JaffaCakes118

Files

742d0724ff5050829277900e5fc8650a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 433B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 76B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ