40eaa844b0e21b45194ad405995f3dde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40eaa844b0e21b45194ad405995f3dde_JaffaCakes118
Size

112KB
MD5

40eaa844b0e21b45194ad405995f3dde
SHA1

59d68ea154358d6aa27e7d8b8920eaeb010ff2d7
SHA256

1bd494731d61d3b27519fadc407df1f155cab8e59093cef051c8e2a2830ea0a5
SHA512

1862f38a007b0575d5f9eec488536dd2e697d70967502e36f0f49b8cea6a54deba2699d2f49093937ceeb027b19cf31ad8df5a284043c715c7dbc4dd03ba0cb4
SSDEEP

1536:2Wh4/Rk21ZvEndSJzfoG8XvkHB+zUTPmHXxjnANHh4XQp4YS/:2kQRkk5E8z8XvkHB+oT+3xLYbp4YS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40eaa844b0e21b45194ad405995f3dde_JaffaCakes118

Files

40eaa844b0e21b45194ad405995f3dde_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ