JaffaCakes118_041e589875656de4c42bdf7f037b1fde | Triage

Sharing

General

Target

JaffaCakes118_041e589875656de4c42bdf7f037b1fde
Size

674KB
MD5

041e589875656de4c42bdf7f037b1fde
SHA1

25a283cf5b8be5fb6f0a088d59d8f7bd65786687
SHA256

f92595fb11890aeb3426e4ec78a5ebee60c1a3fde27043d4b4634b986ced2990
SHA512

1b3250e344b54291f3d3a3f83f83dfdd1c6e136b12e94658f0a98bb4b3f95df451a3e034422e22a1f4679d66de32ebd481b586e3865e3f1393c032f6b69cc5bf
SSDEEP

12288:Q3TdtLW5WIj1YSSdFxFOMHYvBSXyMzBUWb9lx/9AgHLo8OW+rB8:KDsj1dEngBcJ9nPx/igrp+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_041e589875656de4c42bdf7f037b1fde

Files

JaffaCakes118_041e589875656de4c42bdf7f037b1fde
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE