29cb191852f59a10862973b84108adc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29cb191852f59a10862973b84108adc8_JaffaCakes118
Size

31KB
MD5

29cb191852f59a10862973b84108adc8
SHA1

10424061870b282e93767160df442041e645bebd
SHA256

6f330b9c8beac2cc2a974aeab861933224985b217b0dacd2e374eb1aae1c3e6c
SHA512

d011ad878f88584740ac593f91c4b0e36cb31f9b24dc9a9c1ddb0f856581ba6b910438f3a2fbd74433f48d243b67e8387cc13160cfa0fd893d74aa20ac67845b
SSDEEP

768:sfTZ/mXkJFWBRe9bHyp6VWfiO6+1CTyav7st:kTZ/0GFCROSp6O61rvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29cb191852f59a10862973b84108adc8_JaffaCakes118

Files

29cb191852f59a10862973b84108adc8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ