41a7da20d99cae1fb306120d66f995c4_JaffaCakes118 | Triage

Sharing

General

Target

41a7da20d99cae1fb306120d66f995c4_JaffaCakes118
Size

21KB
MD5

41a7da20d99cae1fb306120d66f995c4
SHA1

63c324b1bb4adb73a6ac3d88e78800b2abe199b0
SHA256

b5cfc37f5014be941966b4145904ff0b2d5499ee1eb98a59e924fe760c3eb94f
SHA512

183e842b3e2b2a8ab8dbadb7239ef5358e45c35d07bbc1c98b639faf66069b2dd7acc8340b180d0ec140c3e2d626cf5a8e1570b6f248c372aee4dcae67f03f1e
SSDEEP

384:vlxNR77zN0w638TNFTBs16QCzOcg9Fg2E2:vlxN17zn66W2zONFg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a7da20d99cae1fb306120d66f995c4_JaffaCakes118

Files

41a7da20d99cae1fb306120d66f995c4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.flat
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE