41599a12959c6db021bb4276a8c83917_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41599a12959c6db021bb4276a8c83917_JaffaCakes118
Size

46KB
MD5

41599a12959c6db021bb4276a8c83917
SHA1

19d8b29d1991c70d80bc5e9ca3f1d9d7cf23ac2e
SHA256

141226c4c096a961e369fc6ce9e124563643d828efbbb54ea29f01b44face952
SHA512

1248850cb0e717107acc4bb7cfe847b398a76f34d4b2fe6677fa71b32993ef4db140ea57df5efeb39ba3911f7cb14e3afc3328fb57b83b7f84d6d48f2bd5d87a
SSDEEP

768:ChfL8WyZ4zy7JC492cF48IZD9hGlnI4MLKr7ghGqxqAiTgeo/8kPYK:cfL8WaRkYVE2N/ghGf5TgeYPYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41599a12959c6db021bb4276a8c83917_JaffaCakes118

Files

41599a12959c6db021bb4276a8c83917_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ