41829c8ef49ff03df40ec8fc8c190537_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41829c8ef49ff03df40ec8fc8c190537_JaffaCakes118
Size

126KB
MD5

41829c8ef49ff03df40ec8fc8c190537
SHA1

282522d16488c7911a25b04d868d7295f7c5f163
SHA256

6431dd0f0314e2b99c6807c466b82f7e1dadd1f96f1be5245937f7014c728041
SHA512

631982bdafe6aaa5610a138e114608db623fbf32cacba787fddb6c26bbde13692a6748fde64f1ece6f746c270a28e46b6331f92e2bf09bb53697e1ced33a8c6b
SSDEEP

3072:6e8sD9SqzYIuMQFCzPxIR9eOeWWRyRYwINZv/ow:629SqtHKOxUwWPRYdgw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41829c8ef49ff03df40ec8fc8c190537_JaffaCakes118

Files

41829c8ef49ff03df40ec8fc8c190537_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

n7ik8m
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ayzdohbp
Size: 120KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE