c29ca32e0ddceeb86e5f318c37a90c88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c29ca32e0ddceeb86e5f318c37a90c88_JaffaCakes118
Size

119KB
MD5

c29ca32e0ddceeb86e5f318c37a90c88
SHA1

9b13844a16ec3c97054d7c7080b1e289ec71edd6
SHA256

0b39cd8eb26f9b2d53068d3ee8cc23cf9b948f10a272e0bfe69e91f60f53753a
SHA512

0582efe5cf480215b3c6fb7de2e31c3ea157e6917edbb0b92b0a998864749c6475a18775c1112d92f65f0b984b250304196ffb6433efe99ae28790dd6a2041d3
SSDEEP

1536:jChTmJ2YiM6w2tDJzQS70+LeAj0dz+nprIO2FnToIfuWV:9J2pJzP0+LeAj0dzED2tTBfuWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c29ca32e0ddceeb86e5f318c37a90c88_JaffaCakes118

Files

c29ca32e0ddceeb86e5f318c37a90c88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ