41452edbdefa1b47d4cdf22e4996793e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41452edbdefa1b47d4cdf22e4996793e_JaffaCakes118
Size

619KB
MD5

41452edbdefa1b47d4cdf22e4996793e
SHA1

01c35ed26c6732e397457e1658d14d89c0d6675b
SHA256

8b38973ef9a77dae3a62f6b98666c5c471785ef49712edeca48c8909b6a16bde
SHA512

af98319c0d4dd643b4e7961fa72f3509d6ae11b3676e333d24e83ab588402581a7caea1bfd13484d6fabd0002d61c188ed21b44c8f181f6181b369365f9d42a5
SSDEEP

12288:Srg9hXT/ZpjQgzgeCt3DIi0S80hrRZaqWR40rHeluaL0dUiuRm2Bao:ug9lThpzgDNJvhjyR4kKJRi0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41452edbdefa1b47d4cdf22e4996793e_JaffaCakes118

Files

41452edbdefa1b47d4cdf22e4996793e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hn98
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Jiaozhu
Size: 135KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE