41823949b162f93c52542f31ebed0b9f_JaffaCakes118 | Triage

Sharing

General

Target

41823949b162f93c52542f31ebed0b9f_JaffaCakes118
Size

164KB
MD5

41823949b162f93c52542f31ebed0b9f
SHA1

4a1b9281453377175b9cb15d1770de9076558664
SHA256

966ec8ac9f2bcec9dfd65b390439dd75d47dba19cf131179bdb944fcbb986d17
SHA512

47642cd4f3a923cf35919ba8f2a23481681a24ef41b73a34c783c3108e9d0f25aa3203c1ca5a14ef6157c1f07fc6e0bab9f7c19000c5708ed9224a98f053f0f5
SSDEEP

1536:vAltY+j99NOQYmoR5Q0f55zhjswtjSyZgcDxOlMmfmT1C:cu+w51f5RameCgcNeMVA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41823949b162f93c52542f31ebed0b9f_JaffaCakes118

Files

41823949b162f93c52542f31ebed0b9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

J9L?bs7K
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

c-K.lPex
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

-06cvQ*j
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ySJO/[GC
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

c<A4&CE#
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE