4141368434db424434ff564de8a68c60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4141368434db424434ff564de8a68c60_JaffaCakes118
Size

79KB
MD5

4141368434db424434ff564de8a68c60
SHA1

a6f416968a7b81eff8f77cbe6c601fbe5d6ec47c
SHA256

c19640c086c79be79921e3242185abf212247fc1147b02d6a0f3794a7ce18e1e
SHA512

84cb752633ddff6fdbabfed074bb89fbcdb2f59626271b9aa0acf10a9c2b5604e7a7ca6b7f483074d5aab4fc6f3f13253e30a3b0c7104835814f5a8c56feb1ae
SSDEEP

1536:Si5y+BzGnLXOFRDJfxe0dy6rhrolftzAYKDp0iIzHNF6KpNyh3InZcLS:SikszeXMRDJ5B5yFtzAYIWiIzH5Na3IB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4141368434db424434ff564de8a68c60_JaffaCakes118

Files

4141368434db424434ff564de8a68c60_JaffaCakes118
.exe windows:7 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Rome\Somefade\Mixede.pdb

Exports

Exports

?LONGARRAYCOMPLETE@@YG_JUessentialArray@@UL
?TOWERDESTRUCT@@YG_JUessentialArray@@UL

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.init
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ