240d76c29e8d91ed15037bbdaaaddf79_JaffaCakes118 | Triage

Sharing

General

Target

240d76c29e8d91ed15037bbdaaaddf79_JaffaCakes118
Size

532KB
MD5

240d76c29e8d91ed15037bbdaaaddf79
SHA1

d9138e118b712ec722b90e42f48843e0a4a2d0cd
SHA256

4ed6ecfd8f69ecc6a8fb308fd8560375fabafc40bb61f85a9d9d0516d7c7d847
SHA512

a7ed0472e06c8b7066a459493711cc48d88a9dd55cb8834a2fdf314213e9d3d0c2a5fa6aa631c1312e5d263df0c6553dcaf4aa8981b08c502d9cd617780f7c3c
SSDEEP

12288:YwX6b1LBKMvi6D4xE7abQ0NiCtIGmf4qE2qSZT:VKvvi6DCwCtIGTqEvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
240d76c29e8d91ed15037bbdaaaddf79_JaffaCakes118

Files

240d76c29e8d91ed15037bbdaaaddf79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 17KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 518KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ