829242f0f3d4162fc465af86faf1c955_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

829242f0f3d4162fc465af86faf1c955_JaffaCakes118
Size

1.2MB
MD5

829242f0f3d4162fc465af86faf1c955
SHA1

e177645a129970ca449f9752e6d91201800fcfab
SHA256

5ba4dfb7f25cdfc8f35be5f225c2d9f56a3f211fff0b24f255c5a3fed174e6a3
SHA512

46f4b0d766b83ce7fd6414d59d3bd6e0fb58df2676a6545ddeed52c91ed58b23d6cbaf06bb813d5b4a5d6358d31fed627e7f3944f40144d49c3fddc45ce83765
SSDEEP

24576:xtOXQfJXgWXnPp8p+S9EIKwk4PMzsF9n+7W+hx5i59metrCvlo7FnfAkSMDNu:SXQSW/pY9EIKwk4PMoZ+SyggEr82+MDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
829242f0f3d4162fc465af86faf1c955_JaffaCakes118

Files

829242f0f3d4162fc465af86faf1c955_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE