40944c9cc715c3486f2d05e068bb97af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40944c9cc715c3486f2d05e068bb97af_JaffaCakes118
Size

234KB
MD5

40944c9cc715c3486f2d05e068bb97af
SHA1

0b05fbf1db7fe90b984bbf44a0faaae318574644
SHA256

05d1b4d65a37bf38f47a6ed376656293ea0ef963056591574b17ad614b5b682c
SHA512

7a298310df4655f7ddac785ecf23eb5c5e52ab78be2e5e3c5f0faab2e3ddb56ae6af3c8204acb026b5e0131bd6fd8d7274376a4d119e6dd4056c72f8146af5f5
SSDEEP

6144:3eW1FeegXuUG+W2dTlthKawQulDyuiIChXp2Oh0fM:uWrlgqQ1lzzwrxyuBCh//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40944c9cc715c3486f2d05e068bb97af_JaffaCakes118

Files

40944c9cc715c3486f2d05e068bb97af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RegTlib.pdb

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE