41f450a13f244fc759a5be0f6950f909_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41f450a13f244fc759a5be0f6950f909_JaffaCakes118
Size

200KB
MD5

41f450a13f244fc759a5be0f6950f909
SHA1

f4127d1ca1fa92c77a9508052c27a29fff0c9bcc
SHA256

a3583d32efcf768cff1b3052fce51bf8a5e7b6f6f05bd1050f0a31108bbe5250
SHA512

2aff47bd078e27112bb83f8dca98a8eaa947aec3c6f321853435dd03ece05fd34f077e93cf3298eebf48deef61673647bf2c6e0ccc06ecbdcc42d7a9965dd679
SSDEEP

3072:xdkWGqzjTA3twctszRksYaK0dUSsDNExSONFbvjJAE72k2ZhUQzxM/v8MgXizJb1:z1GqzMjsImUb6FjJBSkE3O381XUl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f450a13f244fc759a5be0f6950f909_JaffaCakes118

Files

41f450a13f244fc759a5be0f6950f909_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE