4941363d6b39feabb29407e669f17cbb_JaffaCakes118 | Triage

Sharing

General

Target

4941363d6b39feabb29407e669f17cbb_JaffaCakes118
Size

1.7MB
MD5

4941363d6b39feabb29407e669f17cbb
SHA1

88dfb05b20b60f0bf94aa4bbb02479e50a47a1dd
SHA256

e6d655334ee467d1efcbcf3cb596e1df5e45f9c63f68bad884f673e4af20ce37
SHA512

cf188987b02836688ad4a2272cb460746d2fb4f695ff59dd2a39f2ddfdd85f84c5e4902def11a251e950131213d24091d81c659a742fdc12931ebe15c94f2905
SSDEEP

24576:Dy2xHD8gjxcFzony0GchlmXRtn+bfH1h0t2ZB+m111111111+MUUY/CTpgKbCcND:DVx4g1ce3sXCL32sHMCiZc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4941363d6b39feabb29407e669f17cbb_JaffaCakes118

Files

4941363d6b39feabb29407e669f17cbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 706KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 969KB - Virtual size: 969KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ