d4229f2c59a40712440546792ead4247_JaffaCakes118 | Triage

Sharing

General

Target

d4229f2c59a40712440546792ead4247_JaffaCakes118
Size

137KB
MD5

d4229f2c59a40712440546792ead4247
SHA1

cbc9269760cde95c4a7b5e171fddb42e05bdb543
SHA256

1cd41cabb7a949a3f02f0456d6b92ea3673e7001ff7b7d6fc22bcb1203348521
SHA512

00416b9d1d0dc1a8d522706d7f261d58920f69abec360e212316f3ec845183f19f7b4efab36b58897a4b6d5e0137e065e27c6247220d8eb2cc2ee801330f2319
SSDEEP

3072:80NNV2X7tlwqLfBccl1fSFtF04FZfYF1l7BAmKlfWuWCaFCes:jN2tlnLPl1fYy4FxYF1Ef4C6s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4229f2c59a40712440546792ead4247_JaffaCakes118

Files

d4229f2c59a40712440546792ead4247_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.k$k2hx
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tgni4t
Size: - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nljhct
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1003.0MB

.rdata
Size: 88KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE