0d4868c1a9ccd348bd6695b3454150b4_JaffaCakes118 | Triage

Sharing

General

Target

0d4868c1a9ccd348bd6695b3454150b4_JaffaCakes118
Size

387KB
MD5

0d4868c1a9ccd348bd6695b3454150b4
SHA1

7a0ffa65c2f777d94b1a7fb339e8d2da9642fe25
SHA256

05f1cc38d95370564df0fe6098016e0b1767acd0997221ff00d64bee9c93c047
SHA512

ee96d7a8813ac8ae79703789fc7a853b12ba500b1d5dbf69ea600562faa7c8eb38e70b13866acb08cac3b5395a8fb636d17ea8e683f6213d0298a152f5978882
SSDEEP

6144:n2Y+kFjBt7X9C+SMUMQryk3kOgflryOW9M7D0s7BRWwD+tVBYslpLtRpB5e024U:0kFjBt7X9CLryfpf7vW9ptRJeT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4868c1a9ccd348bd6695b3454150b4_JaffaCakes118

Files

0d4868c1a9ccd348bd6695b3454150b4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\svn\xmp\xmp5\app\KKBrowser\symbols\ProductRelease\KKB\pdb\KKB.pdb

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE