29a47728454cdc0246409bf45a0ca290_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29a47728454cdc0246409bf45a0ca290_JaffaCakes118
Size

114KB
MD5

29a47728454cdc0246409bf45a0ca290
SHA1

94ecfaa5382abb9941c96f532aa1d0d5aae058c7
SHA256

91a13c1e3758e9f5b9791668c938ae44ad2c9000a7aacb2bf88685432e10f623
SHA512

035491419fbd32568c03f57906ea63ac06024808085ab092c9ec716bc147d9174608329ca5511994920c0f8afb9b800f28a7b7fa47886145550da4b7c28c41c3
SSDEEP

1536:g1VPvh/81hTx5n2sR7GCjdp87t92tzJOxvxgidzdRtQ:gnu1hT2sR7o7tIExJFdxRtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a47728454cdc0246409bf45a0ca290_JaffaCakes118

Files

29a47728454cdc0246409bf45a0ca290_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.vmp0
Size: 107KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE