940502f8d55a8e6a2982b034b1bf8ced_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

940502f8d55a8e6a2982b034b1bf8ced_JaffaCakes118
Size

389KB
MD5

940502f8d55a8e6a2982b034b1bf8ced
SHA1

b8d5a484eb216a4d3056d83d24bbebe8a72e05a1
SHA256

45fd1a745ab0eea8e7a46e1864d4ecb13072acc29f1cbed9b49253d45a1f3d92
SHA512

292e304354d8fa53e1dbae565a426255ce45db15bbcb2bddecbebbf93f039c26bd8761838925c51562ce269425315e3a04db9c349779dae07ab5e871dcfb4410
SSDEEP

6144:Mu7QBMQNsPCy0TrYeqipD+MK5zySlX5o8ThQ00S9YwJKxqsWoi47XqfJH7OHuiLK:Mu7QVPaeZCyK9RKBxXmHcrpc6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
940502f8d55a8e6a2982b034b1bf8ced_JaffaCakes118

Files

940502f8d55a8e6a2982b034b1bf8ced_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 358KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ