1406fcc98ca1674a683f6a70cccf868b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1406fcc98ca1674a683f6a70cccf868b_JaffaCakes118
Size

337KB
MD5

1406fcc98ca1674a683f6a70cccf868b
SHA1

d28c5a25db4f4fd8dae95be43b673397a3e85b6c
SHA256

14fa393540ce97803c278b52e8ffb50e0ef647e09e66855f60f75eb3a17c0e70
SHA512

780f302e49f19f4f1172136b0dad07c35a414ac1f59595ef0e08d5463f002c83df5e3c9826ff3c8accf9f723274c99ac8e81289c2046699e6ecaa03b5f44821b
SSDEEP

6144:BggwHmsfC2eqkEC/mMCJEDnWO9DCpbv6tJke2kpB9odnz83fYRB:oHmL2eZOOCvsDB9odz83fYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1406fcc98ca1674a683f6a70cccf868b_JaffaCakes118

Files

1406fcc98ca1674a683f6a70cccf868b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Build370\sourcecode\bin\ReleaseU\Symbols\IEProc.pdb

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE