41d4ac0e6f978c00e9e2fabed83e2f44_JaffaCakes118 | Triage

Sharing

General

Target

41d4ac0e6f978c00e9e2fabed83e2f44_JaffaCakes118
Size

378KB
MD5

41d4ac0e6f978c00e9e2fabed83e2f44
SHA1

2d1747a743d681e81ec0262904ad172322262891
SHA256

00040ff432f7bb6e5b54a61f56306174ded17983aef0c658cdd266ceb24c1eb6
SHA512

e17357f1d3934422cb29567041520fc02f8afa1c963d6edf47e7a5d7245eb2b9776770a9f6911b51196005e4e2f9e3b04c66b6c2b0af323da6e84fffd60529fe
SSDEEP

6144:iQtdpLKrOqi9vtDyS0JTjuhSre8UVWDsSTX2XrMGxD7Mvzrl:3dpKrOqAVWMSK8UUT27DxD7I1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41d4ac0e6f978c00e9e2fabed83e2f44_JaffaCakes118

Files

41d4ac0e6f978c00e9e2fabed83e2f44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ