03e44011cc9eb67f7cba23d8e4579dc6_JaffaCakes118 | Triage

Sharing

General

Target

03e44011cc9eb67f7cba23d8e4579dc6_JaffaCakes118
Size

229KB
MD5

03e44011cc9eb67f7cba23d8e4579dc6
SHA1

f8a48ef734256a51a6107c766cbcc7138092980f
SHA256

13f67134c928b01cb44653c86ed85209cf7a42d82fbe1c721f4d87a5d49513e4
SHA512

7473bca1b55d4434e3b1083edcf9b67854f1504fdf74a9b11f0cbbe7b9f55fb02bfcdf87332e3520440cb647708a7b9957f6ff87aa4f43de99c549571b9f3d5b
SSDEEP

6144:IXu/ZvOOiOoNPaN+sSsp7exTCb/OKIyEJK1F2:TCPs+Ns5kysK1F2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e44011cc9eb67f7cba23d8e4579dc6_JaffaCakes118

Files

03e44011cc9eb67f7cba23d8e4579dc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\bwa\ysutilities-17\srcroot\release\ysloader\YSLoader.pdb

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE