f40bcc7d791a4ce3d2badfbd75baf4ff_JaffaCakes118 | Triage

Sharing

General

Target

f40bcc7d791a4ce3d2badfbd75baf4ff_JaffaCakes118
Size

760KB
MD5

f40bcc7d791a4ce3d2badfbd75baf4ff
SHA1

92fb2abcbfdca696e09cfb1a10c1e57985982eb7
SHA256

02b14deac1bf148f8ab33033afaf725ba7e22ae7f2949cafbd1e8c0f7457ebf8
SHA512

8f984a9852b6b76568481ae9b778865e2f69ae8af9de21c0a340e5f73ec3fe033447c8f455c9772f4cca371adb573b003a49cb12df58922d2b299ee51a0c3110
SSDEEP

12288:0CSZvFBs+KC2G18gGzcj9vtjFFV8YBGo/haRsLJhWeDa+m2zKOwxbbJxXAfk:AZv8A1zBtjFFVWKhaRSWeDa+mSwPxXv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f40bcc7d791a4ce3d2badfbd75baf4ff_JaffaCakes118

Files

f40bcc7d791a4ce3d2badfbd75baf4ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eee9062b8cbe1efb89c250150605b1a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FatalExit

Sections

CODE
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ccp3p
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE