40acf7a1cac1dfdde958b4123863f324_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40acf7a1cac1dfdde958b4123863f324_JaffaCakes118
Size

818KB
MD5

40acf7a1cac1dfdde958b4123863f324
SHA1

96e7774aafcc284ca02ebaa19c3e425808921f10
SHA256

500e3c7b681ba6a7fb1c19564535fbf89d336b69c96e7e677be8591a5d5f4a44
SHA512

de5cf8c7ed9a26ff69c5e52d9f29aa491a6e67cd597d2037a6fbb525349d84109979ecbc70dd95f927d659e2dd521994e2e9968dc33b61044d0686cccd78492c
SSDEEP

12288:SsYVS+SlFNWLduN0h+cRyZ9YYDSzHBcX1MBCw/mkgU4m0i6FKUtU9:SsUcwA0ocR9+0Bw1MKx1m0iQ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40acf7a1cac1dfdde958b4123863f324_JaffaCakes118

Files

40acf7a1cac1dfdde958b4123863f324_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ