41b77d50311a02376f243cb4872bdd0d_JaffaCakes118 | Triage

Sharing

General

Target

41b77d50311a02376f243cb4872bdd0d_JaffaCakes118
Size

857KB
MD5

41b77d50311a02376f243cb4872bdd0d
SHA1

cf08fa9fae871d8f0c8073431b14af35b9e0e61f
SHA256

8b4c083d8b6830f97c2480c270271fd16d99c834cf8435a1fa067bc59fca2d6c
SHA512

a2a18326da280d42ed56507402d5dffb7c654a80bd83cc268ca7e7d02ae604f1a9e0de42ab1382bda3409b74d018c5d31a81a18b785f893b101d2799705d4e1e
SSDEEP

12288:1TBgHe+DuAqFHO4symtZs0jUyTwYKvNV49dIZfLyOe3NaiszUKmZR2vRyqYOHAD3:1yHmOiTTsUfLyAiZbYRy9yoh1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b77d50311a02376f243cb4872bdd0d_JaffaCakes118

Files

41b77d50311a02376f243cb4872bdd0d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Sections

AUTO
Size: 845KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 81KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 857KB - Virtual size: 860KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE