0d679aa27df428f32c77b1afaba4525e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d679aa27df428f32c77b1afaba4525e_JaffaCakes118
Size

463KB
MD5

0d679aa27df428f32c77b1afaba4525e
SHA1

fe5ac77c95c9b77b75f7d8a93c01204bc46381e7
SHA256

239582ddfd64821bb4649066d95138d0868ae84cfd820624e12c5688054ab095
SHA512

04006d92a553e5af9b9ae776538e0d0ddce124377cc23a2665d175d528e20d0c66e1a3c4c0ff6131a676bf33de1bb044a09e86189a4ddd9ffbe39459d22ebf85
SSDEEP

12288:t8QNZN2mODUybkE8a8vlh5R0UGJ4SouEdz7:tHZMYK8vlH6JE57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d679aa27df428f32c77b1afaba4525e_JaffaCakes118

Files

0d679aa27df428f32c77b1afaba4525e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\SVN\rczip\bin\Win32\release\pdb\HaoZip.pdb

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE