40f779e8d2ac3a7f5df61d49d74c0789_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40f779e8d2ac3a7f5df61d49d74c0789_JaffaCakes118
Size

228KB
MD5

40f779e8d2ac3a7f5df61d49d74c0789
SHA1

5cb065eaa0934b7508e51a3a38d5006bebb15a54
SHA256

b2c06847855923e0b6048a3a5a7bfcd7cc628f086232bee4655a958ad2f5159a
SHA512

d0204ac3b31640ff02b9d4719c07aefea3fd1a8dcc4f92d613d45f07d19a9641b00e1605ccfa162c157d80feebb9454d94689c3b68a2f8754194fd27b6ec15c9
SSDEEP

3072:NOHrx80EzhNuT+zvRz9QJ7xw3u8q2qW79XZwJBuiqjyRmYL2O9g:NSENAEvGN2q2qdlqKiO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40f779e8d2ac3a7f5df61d49d74c0789_JaffaCakes118

Files

40f779e8d2ac3a7f5df61d49d74c0789_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HardwareIDExtractor2020.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ