41ef54c4116d1212b9a0a314c20890ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ef54c4116d1212b9a0a314c20890ea_JaffaCakes118
Size

675KB
MD5

41ef54c4116d1212b9a0a314c20890ea
SHA1

3c63d09f9301caee191aacdad0c63d7c5f9331f3
SHA256

96513aa8bdea06e909c4be8f806af7da6bec4bdf89558e2070cfb6d4b73e38a9
SHA512

1cef0c65626ee3b50eef79fe6ea04e85abd013d55bbdb2c6bcdd23f7739edc155c3d5d8bfde593d88ff9e3c4eaab4695a81c3e18c8d7e73a4a2f8217a9e41788
SSDEEP

12288:NQFatHkSAbe9b5iq0TYZw+7uT5ClhrBLstIQ2wdlTawLUtVLiUjDR/vRFuwwra:NQFgHk9a94tTcm5grBQrrTNItl5R3R0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ef54c4116d1212b9a0a314c20890ea_JaffaCakes118

Files

41ef54c4116d1212b9a0a314c20890ea_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ