12428bbb0a84ab9b95d6b35206f53711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12428bbb0a84ab9b95d6b35206f53711_JaffaCakes118
Size

280KB
MD5

12428bbb0a84ab9b95d6b35206f53711
SHA1

faa33f9e2eb09c7cb7f267648cb72cf988c79109
SHA256

16a1fee64abca5aeb5adfef393f325db939e0528633b82f294f7a2c7ebfe888b
SHA512

700fd1e2b1de8514fb165a0e6223d050511ac68b3fb5ecebfa6b5a8d37a49ec6704fe69906f33deb01e90a742bec8a9bad64809f719389563366ecfb6553f6bd
SSDEEP

6144:nfB0efUlkNNh7Oo80jzCp9Gi2/i/D1i20/Q4Bx9dl7XDQqD01D:J0Hqvi0jzCp4Z6/D9N4BxT1XUqD0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12428bbb0a84ab9b95d6b35206f53711_JaffaCakes118

Files

12428bbb0a84ab9b95d6b35206f53711_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

i:\2014Beta2\sourcecode\bin\ReleaseU\Symbols\QQGameUpdateShell.pdb

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE