29f5dd6ac70b860d1725393a3b8f6484_JaffaCakes118 | Triage

Sharing

General

Target

29f5dd6ac70b860d1725393a3b8f6484_JaffaCakes118
Size

6KB
MD5

29f5dd6ac70b860d1725393a3b8f6484
SHA1

61ef359369f49a21a29f3af6fd9fcd9646b954ad
SHA256

c585c9518be62d695d6ae60713b0ea361b709eab2585e9ef11b8b06bf059315b
SHA512

1033ef45373e3aaa8860364199aa88fcaad341d464114502cb85f0cc212d327a1e41a2c2176c7cbdf8e4e118c555f6f344a428f079805157c8b08e1ac52a808a
SSDEEP

96:RWFL/Jp0/J4RlhLXV7DMyuIkfrcNRi64zwKvdqtwdYKpJ7DEJkpddsHM6/MnVUR:iJIJaxdw9uRi5kmdYiBDqR70nVUR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f5dd6ac70b860d1725393a3b8f6484_JaffaCakes118

Files

29f5dd6ac70b860d1725393a3b8f6484_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE