41f78c4ef6c9a61f21f20a3b0b26c9f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41f78c4ef6c9a61f21f20a3b0b26c9f7_JaffaCakes118
Size

19KB
MD5

41f78c4ef6c9a61f21f20a3b0b26c9f7
SHA1

374149820ef273ad97466ec63ff4a07f4301574e
SHA256

82a6f3c9fe6cf39814c94c693dcc4f50e57b6e542336e4d8848b423256f9a041
SHA512

18f04e3054ca4fd4d6fb0fd0474bc8d91a5b0e7c61f37c0d42e1c3af579bd06d2f722b5c9f9f3e11a527fbc060389520622c340eea3a296ce0d09ecf81ff7781
SSDEEP

384:ufQ7VM0RTh7tTpQI2EQKbQiPLL5ldD84nScFqK5JergCKusoIj6:41cVhpQI2EQK0iPDh84nScF15GR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f78c4ef6c9a61f21f20a3b0b26c9f7_JaffaCakes118

Files

41f78c4ef6c9a61f21f20a3b0b26c9f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ