0131dc1ea850e2cdf43f12cce7932793_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0131dc1ea850e2cdf43f12cce7932793_JaffaCakes118
Size

232KB
MD5

0131dc1ea850e2cdf43f12cce7932793
SHA1

6b61e94173828f437bce8c320e490feef24ca341
SHA256

22bea8a32ec2ed61bfc223ed099665f4cda0a80390844957cfcfa25a774e43eb
SHA512

409af22f894773024424ba993e052d9b3bdf4e457a213b6bdc6a57e6ecdcd2df484ccd2b0aa2f1cac72c514693b8a22489114415133d652c9d30a05749599bfa
SSDEEP

6144:rakJfazIpYSzqtOlzpIHsXFZK64n7q6BVSXjn/5Syi:raWTPdIM/X66Xjn/5Syi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0131dc1ea850e2cdf43f12cce7932793_JaffaCakes118

Files

0131dc1ea850e2cdf43f12cce7932793_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\TempView\Output\BinFinal\QQApp.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE