102e17ff9234d84e7fb4ff9aab3a09e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

102e17ff9234d84e7fb4ff9aab3a09e3_JaffaCakes118
Size

525KB
MD5

102e17ff9234d84e7fb4ff9aab3a09e3
SHA1

86e03b0df15dc3ca6b5c2dee472b0a6fa81e22a3
SHA256

222cc841e8ade6723ec49c72e1d2eeb4a374421ad4af405202d461064cf3a8dd
SHA512

25839500465a454b3ddf68d0406cd34eccae2093cda36b0ccf60f41bfa522ee33ed19adab0abbbf768813e7adc2f0b388cc310e486c7479cb61ce3c1378490dc
SSDEEP

12288:WVKKRgIsPpLDNZ2tLVMy2bz8AT2XiA9gs/apJ:kK20Z2tLV/4V2XiA4H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102e17ff9234d84e7fb4ff9aab3a09e3_JaffaCakes118

Files

102e17ff9234d84e7fb4ff9aab3a09e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\chunyung\documents\visual studio 2005\projects\sonytestapo1.0.0.36\release\vncutil.pdb

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE