41076fe158db3d0c9bcc1b6a4b34b532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41076fe158db3d0c9bcc1b6a4b34b532_JaffaCakes118
Size

958KB
MD5

41076fe158db3d0c9bcc1b6a4b34b532
SHA1

9575b644b4304c7deacfe31d9239e2a8fdfe6874
SHA256

b1069d17262b582fa9b8f9c5eb3e32071767aa06343b7403284949ac4fff83e3
SHA512

fbd120fa482b19db517698784cda1a7c1b512e91cd11aa71a77e5dde4441266031160076e0b82e4c31485a2b3ced36e3b1efe4b21e031db87b915eb9ed61fda2
SSDEEP

24576:lrSVgM4ok4sLCkI3sXbQGaN6vI6Gw+Wwj4:lmkkpGaplPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41076fe158db3d0c9bcc1b6a4b34b532_JaffaCakes118

Files

41076fe158db3d0c9bcc1b6a4b34b532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 956KB - Virtual size: 955KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ