029d18bcab8ca62c80ab09ec86c7f64a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

029d18bcab8ca62c80ab09ec86c7f64a_JaffaCakes118
Size

59KB
MD5

029d18bcab8ca62c80ab09ec86c7f64a
SHA1

db1a5a95452bd0bc367ac7429ba7f73d38179842
SHA256

e94b79cfca2e70c32c4877572167c5c86f546f32a87e59754a9247b61289f7d8
SHA512

5271e591023879283bf5489c2249d2c9c70f45e837b414e8626b377deff205244bf223274cfc91b3b515541f2d7ace784a8fb27da3450603511fb16a0a1e9f05
SSDEEP

768:sYexVQY5aD3zmQ1HWxc6s+77+DSdVhnvhU2gwlxlXGGB9yN23vAoKP41/OyQ4sDs:sYe4Y5aDAQ+7eKhnvhHvXG4LkWyVDtq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/54508741a39e55db9a6eb9e60171b2ff758e1691

Files

029d18bcab8ca62c80ab09ec86c7f64a_JaffaCakes118
.zip
54508741a39e55db9a6eb9e60171b2ff758e1691
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ