40179c1235faca417941f250d9ea71e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40179c1235faca417941f250d9ea71e0_JaffaCakes118
Size

23KB
MD5

40179c1235faca417941f250d9ea71e0
SHA1

46d13f7285c5098fc2f2d3af30c1235e1fe43902
SHA256

5a4486fe2882fbb7c17ba0beb6d066a63f0511a7fc58af0ea996217502fdbba5
SHA512

a7687dd312e787010e2bd82cfac57c1134175617b9f9bdd49ee53631d8acd7986e10d4e0cfc685aaa62c94663bae9034d7de807ad59460ebfdb9c2a6e0bacc0c
SSDEEP

384:sYbVaDj/BCTnHh/hhg/PKm0mri9UbZRzqMbnkLjhw+79NXlpjmn6npQtSeRA:s6an/BCTnHcNri9Ubz/7kL1xyn6nre

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40179c1235faca417941f250d9ea71e0_JaffaCakes118

Files

40179c1235faca417941f250d9ea71e0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

TransSimonial

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ