165bdb1d8f017af309be86d1825a813d_JaffaCakes118 | Triage

Sharing

General

Target

165bdb1d8f017af309be86d1825a813d_JaffaCakes118
Size

425KB
MD5

165bdb1d8f017af309be86d1825a813d
SHA1

c3c56a6d38fbe04986faccccb4d0077c7b7d0e15
SHA256

051423974323b47ea3ba7fca9c1127a1f03e5d4fd1be7880eca77f6055004fff
SHA512

9f12356c5455e3ca42986289c9536fd93fd9d8db439ae282b0d0d2991be568fabb26b716c481d11afd2750f9c616d76c68676855877aa44922a1d6fb2340fc22
SSDEEP

12288:oTCxJr8nYv12eYmxXsRLjjIiIyyM/G5WseP:oT68Yv1mmxXAXJ/hlP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165bdb1d8f017af309be86d1825a813d_JaffaCakes118

Files

165bdb1d8f017af309be86d1825a813d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\workspace\xl_framework\win32_component\xlbugreport\bin\Release\XLBugReport.pdb

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE