29f9da9b096b0c173da4264f300f75b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f9da9b096b0c173da4264f300f75b1_JaffaCakes118
Size

244KB
MD5

29f9da9b096b0c173da4264f300f75b1
SHA1

4c5bdda6f1a8fdf8987fb88c4efbf2efc6593a85
SHA256

e511fc97057d4f55212971acc6be1e67a8f665f5c79d1b568864adc821d01b5c
SHA512

95a271b3649576107bcdb965316d412e70a53e89a71b8e1298996dfade552aae4e8f3cb20e96ec6bc63e1fcc235f8ba3f29bdce32a9f1f42e9989c6badc62589
SSDEEP

3072:JSf7GkgGsdRD8L4LmSNgNRQDzanYTdYCpjBxhpHw8XccMTy57frNfX4wvvNLBFVC:JbFGKRU0mGS1Y3zxhpHijOtjNDRBrMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f9da9b096b0c173da4264f300f75b1_JaffaCakes118

Files

29f9da9b096b0c173da4264f300f75b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ