0029634f8d4ea56b09bee777a442b8d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0029634f8d4ea56b09bee777a442b8d3_JaffaCakes118
Size

3.4MB
MD5

0029634f8d4ea56b09bee777a442b8d3
SHA1

dc4a91f0c493b1355b2b3cc3708fe553bbe29008
SHA256

68ddb9335981166b80f3f29baef2cf34c6ebcdfc089636252c2862ee17dcc421
SHA512

c34264c778c17e80f0783b31c0490c11f6bf59e970a9b7ab8d55c8fe072d6656fd818bac69d315ab4e704f62b4f0a4a5fa2e6f12b2d21fd8b55ee4f000bbb467
SSDEEP

98304:rUI7z2DQ56MIBGwmATcI/sF1zw98CDkwofTXpa7sxhub3sH:d7/IswmApoy98CDkjIs7uYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0029634f8d4ea56b09bee777a442b8d3_JaffaCakes118

Files

0029634f8d4ea56b09bee777a442b8d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ