41cbaabb584bb15cbd3b38bb72e299cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41cbaabb584bb15cbd3b38bb72e299cd_JaffaCakes118
Size

821KB
MD5

41cbaabb584bb15cbd3b38bb72e299cd
SHA1

f8d7bd07e7cc1ff1dbd3a6e7454e94a6b544ca66
SHA256

aef4559125ff665235a8ac2e0471cf7bfe16749ec37e2cf225d7ae3bf455188b
SHA512

0f8b737dfd4205c9ea21a8e36787a8f4fd0905f19fc2056e95dfca08cff532e70d672509727caf9f079a2f55fa78728a1d5a93530a82433d1dc06500165deeb6
SSDEEP

12288:3XltigbNaIK/ojiJPfyba1qVmDY1Xvj6U5oeQr7WA9KQGQ8voWzG/kqiMx5:3tNMtFabFmDKr47WNQcvok+kqiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41cbaabb584bb15cbd3b38bb72e299cd_JaffaCakes118

Files

41cbaabb584bb15cbd3b38bb72e299cd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 730KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE