40484b55af96f21ff4dfed4060d1c9cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40484b55af96f21ff4dfed4060d1c9cb_JaffaCakes118
Size

657KB
MD5

40484b55af96f21ff4dfed4060d1c9cb
SHA1

b1244e412c0842e90f3b9ebbd44071ccad4cd732
SHA256

f06d9e22e8735bc941491c93bb18730ed97ecdef9a0970897f96005961e0f2cf
SHA512

705151beb088af942707f3b0cdce697beaab80cd005eb618df244e35a6488f347ce3e1ebd0dcedadacfbfe69093956ce230c3938c5f48f0b8611a95de8285e2c
SSDEEP

12288:TSyMJfsGLCD3jpE3wvIhnpvISQgq4VcD2TmjWeAesdaGrLM4eOXnf2HKLP1:2yMJfsr3jpC5qIZiWeorMSXnfuu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40484b55af96f21ff4dfed4060d1c9cb_JaffaCakes118

Files

40484b55af96f21ff4dfed4060d1c9cb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ