41324b34d09ecd6c09a288c6c59ebb45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41324b34d09ecd6c09a288c6c59ebb45_JaffaCakes118
Size

1.2MB
MD5

41324b34d09ecd6c09a288c6c59ebb45
SHA1

96f19965dd449cbe56651e13fdee79ae88f8ec8d
SHA256

6c9e903c31d2705c63ca51a7f134b4f9f1311173277159d641323db269282ab3
SHA512

43cefaf99b26fe8f8a32ccc53a1f7f0dc86233095b66fa22fc65e43fad110bd283575e5f6f8583375da1e1148c40a9934198f41e0d347ca538293149458ecc64
SSDEEP

24576:sSZPugO13V7yFO/qi/NXNfGCjSLmwsNPd3Rg5:3uj35yFO/jNd+CjS7sNlK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41324b34d09ecd6c09a288c6c59ebb45_JaffaCakes118

Files

41324b34d09ecd6c09a288c6c59ebb45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ