41ac90d9c64e468ac95c935ca37125da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ac90d9c64e468ac95c935ca37125da_JaffaCakes118
Size

284KB
MD5

41ac90d9c64e468ac95c935ca37125da
SHA1

4b3f77353a5f64f69c7769aebb13c7cbbd3828e6
SHA256

1ce89351c87383511963c6c033bbf37fe6207a537a087f253df1425af382ab28
SHA512

0f85fbcca659afb83ce085f37be0015cc8ca7a7524dc26a424254119545ffb89159bb99bf228c56e3282591242b5aeb72a5e8e321b8a3d6f0ec2dd57e77a40bf
SSDEEP

6144:SeM9sWSH4nb7LoXLjD7Ipn3YKrtUd72rPa7Pakaw17NXaftyhus8VmAk:omW+s7LmX7W3YyUd7DXjQvk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ac90d9c64e468ac95c935ca37125da_JaffaCakes118

Files

41ac90d9c64e468ac95c935ca37125da_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

vaglq
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vbglqwb
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gl
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bgmrwbhm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rwchmr
Size: 16B - Virtual size: 4KB