068b81d7764c951b052adce832ebee2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

068b81d7764c951b052adce832ebee2f_JaffaCakes118
Size

273KB
MD5

068b81d7764c951b052adce832ebee2f
SHA1

44d923b79c171e71801d97aab3b55dc519d26297
SHA256

23ad8fa953cb333bb04bef65e6c0a923d1e791b6b87ddb17c53dc3e6df2d7b2e
SHA512

cbcd0f81e689f650638a399de7b5c1a6d97fc9ab13f805d3886ab8913ff227e4462868ad4fd469e3692465c9dfe74190706d7a0c01a4c5ad7ed7dd135a854079
SSDEEP

6144:aFCMHqU1hLRrDOSANavMGtQ5pde0FTpDj7L:aFgU1htvOqUgufvXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
068b81d7764c951b052adce832ebee2f_JaffaCakes118

Files

068b81d7764c951b052adce832ebee2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\develop\global\Release\bin\acad\DwgCvt.pdb

Exports

Exports

?getDwgVersion@AcadVersionInfo@@YG?AW4MaintenanceReleaseVersion@AcDb@@PAW4AcDbDwgVersion@3@@Z
?releaseMinorVersion@AcadVersionInfo@@YAHXZ
respJsphU3_x16
respSdjhU3_x16

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE