12c50beee6e302d68c9bcbeb7440a3f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12c50beee6e302d68c9bcbeb7440a3f8_JaffaCakes118
Size

237KB
MD5

12c50beee6e302d68c9bcbeb7440a3f8
SHA1

e8a8b6051d49dd5792152a7db65e6d35d7f64a49
SHA256

12afb1da059c7ec2e78dbdfd96e70dfd14905b33fec8d54b13f7e121e525cc3d
SHA512

ae7f3af4b29400c9f8a8cbddd911fefedb86b205551b8f701727a5ecb3f0d08d9fc3742bde712ca5bd1d607581a19f92d877956be4a7e9d7c689a3d1f2d0b520
SSDEEP

6144:R0HQdgwtCCI3e2KoQk5W7MWuWIRHNEcYht+bKj6CHAdnfK:R0HQdCCI3JKo95IazEdh4bG6CHAdnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c50beee6e302d68c9bcbeb7440a3f8_JaffaCakes118

Files

12c50beee6e302d68c9bcbeb7440a3f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\XLStartKankan\Release\XLStartKankan.pdb

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lif
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE