29a25f8b4e812d777c448ded7116ede1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29a25f8b4e812d777c448ded7116ede1_JaffaCakes118
Size

496KB
MD5

29a25f8b4e812d777c448ded7116ede1
SHA1

c597aef4a1d532af8eab3c64e906d3a69e188af2
SHA256

62fa5d8d1dd8f7ec479415ce997e71eee221887bc7817d85b28886a3b3e5ce76
SHA512

e2a4de061defcabb15b3ef93ea96fde74013fe79a658a20a6c8303cf00c1a5e2600b5a933b6882b89ae356c36ae6e53870056a59042373c702e2c46ba040cc3a
SSDEEP

12288:ihq8Lig6r/YNkonDcIEw9MFT/Hup3x2xcVgvo2h/ilxo/QKSNCh0jT:ihq8Lig6LYNkonZb9MFT/OBS5vo2clxV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a25f8b4e812d777c448ded7116ede1_JaffaCakes118

Files

29a25f8b4e812d777c448ded7116ede1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE