40232d51517dfab8b91ae0989e385708_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40232d51517dfab8b91ae0989e385708_JaffaCakes118
Size

639KB
MD5

40232d51517dfab8b91ae0989e385708
SHA1

6ae60c4b43ae8219db82dd7af9f2e6ca3329aee0
SHA256

4937966b36062907bf48f441b8260f80ce76aae57bbf0af50763f0aa24f90160
SHA512

8291c3e912344bb5a6425434a017451d0d8e980bb2f613be60cfdfdac8c4977144da9da58eec6650e3e8b042b908637d879777e9d96936bc0ee5b005be763c21
SSDEEP

12288:Cbv5/+D8C83enll3XtnoED3FjMtehUJbtZ:60853elToEDKpt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40232d51517dfab8b91ae0989e385708_JaffaCakes118

Files

40232d51517dfab8b91ae0989e385708_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 531KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ