a41efcee0ff49a703ec580968d9fea1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a41efcee0ff49a703ec580968d9fea1b_JaffaCakes118
Size

372KB
MD5

a41efcee0ff49a703ec580968d9fea1b
SHA1

ee398a93b31d70117d1a0c2d9f3f7b551879f164
SHA256

c919c6ecf6a9625daf296eb412c55a48d00367c35fdbb6f3753c5412c22480ee
SHA512

a5516ce3b9bbf33487b92584003d6a9e4d9454a342bbf4125ad083c123abe5a711c429c6fce51042dcb905a76af66721bd2d8993be9757c4c24ce1e5f8a9b3af
SSDEEP

6144:qZuQObR8sVImGUjWN6YZmp1dkIX+8ml8CGiglMEfj1M+cv/eXLjrnUMfj:5X+mdWN6RpUVrKCh/Ix6OX/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a41efcee0ff49a703ec580968d9fea1b_JaffaCakes118

Files

a41efcee0ff49a703ec580968d9fea1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE