146ff643e15c5c2300c0b04dfbd606ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146ff643e15c5c2300c0b04dfbd606ff_JaffaCakes118
Size

330KB
MD5

146ff643e15c5c2300c0b04dfbd606ff
SHA1

d6015a933f82ad1dd4f57c00a76250d6d2780262
SHA256

168b065093252d770b0fc9bb4c121c970272e7beb95d2ca346f5efca6d7dc249
SHA512

00fc24a52c9fcb1923a36092ba9625c2bdc22902fbfd81431c23440c87917d3849fc28d916318402489464f16ffb596b7f630c14e153ad6c2a4e0cf6ab4ef2e4
SSDEEP

6144:ziWSymUb5ROc2eYf83QPOwOTEw1szs8agFDc0kJp+O+:O5UNEeY03QPa58LDo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146ff643e15c5c2300c0b04dfbd606ff_JaffaCakes118

Files

146ff643e15c5c2300c0b04dfbd606ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\MiniBaidu\Basic\Output\BinRelease\BaiduUpdate.pdb

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE