40da3134f04b90b6b2a5e8e8d2d05bb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40da3134f04b90b6b2a5e8e8d2d05bb2_JaffaCakes118
Size

617KB
MD5

40da3134f04b90b6b2a5e8e8d2d05bb2
SHA1

de04de7a4c7f4093b25d655fb5b07318da6cb7dd
SHA256

3957e45c9166723c905b9b76c530e304add68e8b00c10cc686f207fefd550a36
SHA512

d5f989e9a092ce2a1889d4d33fe6b1dd3d364ccb5d4f9d32b85bf197d858634364965c56fd39a359d8653db585317d05ee3bc2e5155d3e83da825d34ffae3dc0
SSDEEP

12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHLbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHL1+CSfasO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40da3134f04b90b6b2a5e8e8d2d05bb2_JaffaCakes118

Files

40da3134f04b90b6b2a5e8e8d2d05bb2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ