41f429921b64105ae9e273e777253a41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41f429921b64105ae9e273e777253a41_JaffaCakes118
Size

503KB
MD5

41f429921b64105ae9e273e777253a41
SHA1

424be05b15e02dcb1b33e656d84dcc0bc0a3bb00
SHA256

2247a54df0291ce9db10212265377a59a8caa6b5095a5fc62396d154cededf1f
SHA512

8aaceb8ac90102c3c43b51cf90f4a02769dbc21a7e38d6cabc850b9ebbb1e9745aafd81c7cf419e31f0c221eb8a20efa03f93e0ef28bea7ddecbefa575c7e269
SSDEEP

6144:/n1rF9UWGT8tG/zrsftdajyxFtMZ8wHHAH1vfoXDCdm1bkihFcqYCXlscwlX:drF9UWGT8tK6daexcZ3HAICObLFcitWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f429921b64105ae9e273e777253a41_JaffaCakes118

Files

41f429921b64105ae9e273e777253a41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ