0e2c38bb07d55d0042b6b17b24828418_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2c38bb07d55d0042b6b17b24828418_JaffaCakes118
Size

253KB
MD5

0e2c38bb07d55d0042b6b17b24828418
SHA1

08c89a90bdaaac4a834b1bca8220e645e98cbfa9
SHA256

14f3b19700e2ead1ad856f7f289602d6817f48626c1bb1d9fa793eaaa53c8271
SHA512

10e4b5914ee88f07abc7dc00b3badeff72d9343acac557512ab05e911b943c8b0be0433bd1982764127a68c54d4600f6039c880629e3f1efc2be46e534c04e89
SSDEEP

6144:E9UtbVRd2xfmCN4QYcHUQYULJU4P7X0Jx+7mxRekjxgV:4ahjNCN1CU7Ejx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2c38bb07d55d0042b6b17b24828418_JaffaCakes118

Files

0e2c38bb07d55d0042b6b17b24828418_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Development\AliWangWang\trunk_tb_trader\modules\WangWangPostInstall\Release\EndProcess.pdb

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE