40766c18c9c170250a66977634131d89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40766c18c9c170250a66977634131d89_JaffaCakes118
Size

519KB
MD5

40766c18c9c170250a66977634131d89
SHA1

14622a2214916ea6ad3f2879573e31848c82034f
SHA256

650d976e8bac7831eb85eaddc2a4f26a51e12cde68fb14ae18fc7b500395acf3
SHA512

8103458a1b9846d4a2f3b4148ed47383828f4aedb923db436a982c39bb84a06fe04bdac0638d900e110040f7f3a5a00478652c6e025c180c0ed77375f4da25f8
SSDEEP

6144:Fw0tWKJJdVZ1Vns5Fq821aP0vM/hcoannZB7BiUXqE7nlIZbMUFknjF+Bf+vUdt1:i05JJdX1V5821ZvtD75B+MUk/Ur/ONy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40766c18c9c170250a66977634131d89_JaffaCakes118

Files

40766c18c9c170250a66977634131d89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.9MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ