440bfa3a2776d67daa8ec3c9085eb65f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440bfa3a2776d67daa8ec3c9085eb65f_JaffaCakes118
Size

52KB
MD5

440bfa3a2776d67daa8ec3c9085eb65f
SHA1

acbc6e93f04188ad5424bace0262bec61b53b18f
SHA256

be251bd01b868f81cfc6dc138cce339b51a041913a89be2d1a192b7e50ab6e70
SHA512

8d86302a4075405656a6b3b32c53903320f02471efb3534c377c6b2ba6afaa5a7b9ba5ffeb27a2cfbac6c3b7844b19e2ab9bfc48eb6a0068801ac41e8af29612
SSDEEP

768:xZ5t9/UA+Wk4vm/Mq9BsPyCA6KD4Nb1zaTImioPH+qnb5p:vhT+/MqppIFm7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
440bfa3a2776d67daa8ec3c9085eb65f_JaffaCakes118

Files

440bfa3a2776d67daa8ec3c9085eb65f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\sources\FtpTest\FtpTest\FtpTest\obj\Release\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ