40bce0a01e4d5b46571eb2d9c0e59639_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40bce0a01e4d5b46571eb2d9c0e59639_JaffaCakes118
Size

76KB
MD5

40bce0a01e4d5b46571eb2d9c0e59639
SHA1

4c6301c05cdb701a826fdd6435bf089c608e3b58
SHA256

ab5236152130e16836a3145929cf9a63ba03aca06d85669a5cdcc396ae152bef
SHA512

f6165ab893babac4c25b0f26c62ca814f1628c793b46eb5330ba2e2566867babc9f3560d40bc84e21026d8bcf49df42f2814425715eee49de091cb345b7eb324
SSDEEP

1536:4NXZ3I9hJgdG+yYiJKJViNRkiygdR5tvV51E2F/HWr:Q3IXGYKiRHygXjxvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40bce0a01e4d5b46571eb2d9c0e59639_JaffaCakes118

Files

40bce0a01e4d5b46571eb2d9c0e59639_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fffd9566f06cae802a77a95301407935

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
Sleep
EnterCriticalSection
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ