40ffdc8f171304489b1126cc8bb26355_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40ffdc8f171304489b1126cc8bb26355_JaffaCakes118
Size

276KB
MD5

40ffdc8f171304489b1126cc8bb26355
SHA1

77a0420ff60b0a9457ff6677e1319ecf4e08f915
SHA256

67cbff9e383ae0c160a29b1000bc9d212ea3deeedd657d041699391a7e9677dc
SHA512

f0c7443506cb314157ab4757b177aab596148b976575cf747fa700d049a78e84441c65ca4fc4796c30357d379ebc72f9bed66f5402c595b1d3842014213f8962
SSDEEP

6144:D+xu7CNnu9HmBLTOaP8DPccOEG5dTai+Ohl:Ce+LpE75OT5deix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ffdc8f171304489b1126cc8bb26355_JaffaCakes118

Files

40ffdc8f171304489b1126cc8bb26355_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\2010\Desktop\تشفير امان العرب\tools\tools\clean.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ