42b50e3df31cda3c15a3b6175a3aa8fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b50e3df31cda3c15a3b6175a3aa8fc_JaffaCakes118
Size

89KB
MD5

42b50e3df31cda3c15a3b6175a3aa8fc
SHA1

91dc057d5a365d92fd82866c26d550b263e2f899
SHA256

359964c33d583f475d751e8be1079f2b3c5852b6d7a41daa12c105636209265f
SHA512

d4be6845737054937485811c7e695c87739024ff85549c381b84616b2cd5924fe37382d639d02c9875710290a58ae98bf8080f299b0351108e2ac24bbca92714
SSDEEP

1536:v5TmhLfMvZ5R+AaecxO1SyAnlSp3gAQEj2e8FUe1bf:v5ChTMXR+Aaecx3yAsdgOSe8+e1bf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b50e3df31cda3c15a3b6175a3aa8fc_JaffaCakes118

Files

42b50e3df31cda3c15a3b6175a3aa8fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ