a429f3517bae7075e36050190c7846e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a429f3517bae7075e36050190c7846e2_JaffaCakes118
Size

272KB
MD5

a429f3517bae7075e36050190c7846e2
SHA1

aa2403794d899ebe6e231745e173ce6ff4b5717b
SHA256

a820df3e6ee23ea3e2f32868104e865ae6e53409352704640c2e141922086631
SHA512

3c918ad356ad6f882a51452b973fe4a4c817abad6f5fdab53262558f7eab250798721b5137a2940aa455ea24e193caeb571204997811fa2ade84a040855d1473
SSDEEP

6144:VQ+MPoCc//////kv0Of7qVtywD/3eUVvQ377RLIiX2oOIuLnn6OVGGOf:VgoCc//////kFc8wDPeEuRLIUKHLn6Yw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a429f3517bae7075e36050190c7846e2_JaffaCakes118

Files

a429f3517bae7075e36050190c7846e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ