40bebfb5971857f7356202c5f05d1017_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40bebfb5971857f7356202c5f05d1017_JaffaCakes118
Size

637KB
MD5

40bebfb5971857f7356202c5f05d1017
SHA1

fcc91a47e165c84ddf3d1da7f374f36059d7e905
SHA256

cabcecf62a7e7efc2bdb0bbc07bc107cd3759b3052c3b7d53ecea3aff5714b7b
SHA512

f67c05f9d15e9f6e8d2e542bda0b563518794a145272430a895bee78d4e6de168531cdf08733183ba979e11c5985c54af09dc4b13bb60bf0cc9da3db4d8aa5bd
SSDEEP

12288:IuKdfNxFV/VgM0EodfcsgagqfLzWFkYykPpqOdRZceSUGIU:yfNxemiffg9qzS2Ylo0ZcyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40bebfb5971857f7356202c5f05d1017_JaffaCakes118

Files

40bebfb5971857f7356202c5f05d1017_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 624KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ