41abc8921fa6f1d99189f523aa651bd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41abc8921fa6f1d99189f523aa651bd2_JaffaCakes118
Size

1.2MB
MD5

41abc8921fa6f1d99189f523aa651bd2
SHA1

09b751ba47a687056941ebe2eb3a9aec21b9b24f
SHA256

b55bf886f694f0f3b1ec5dae3aced03d1d253d6122c60ff3cc84b2de78bf5875
SHA512

ccdf824bffe6570575478cc5a663663599e1346e012889fc72bdb0c1ee0772f63f01b8e5fe723aaf0fffa3d80437c7a3b59e74c0bfea58d495430a5cb0fc6b30
SSDEEP

24576:CGcyygBaGeHWnbjw1T6NN73Kq6Sd+6RcSUUPxp:CGcnG1e20ONNTlJUUJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41abc8921fa6f1d99189f523aa651bd2_JaffaCakes118

Files

41abc8921fa6f1d99189f523aa651bd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ