2198b289c130c472a8f1d9073a5beb02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2198b289c130c472a8f1d9073a5beb02_JaffaCakes118
Size

269KB
MD5

2198b289c130c472a8f1d9073a5beb02
SHA1

e70a913d45d8ff7d6c2ad840ddbcd059a072a74c
SHA256

05cbc5fa46b2c85669fb3d642a12c6742cfc42b9fc82af407dc770cd15fdf20d
SHA512

db7af089456f68abed3386b36a1d7ca46c52ab25dac5e6fc784fb36ea5f3d571341945e76f59010c5c65c44c39aecdbbc3a218a908fc9b41961ba95f1f3ee821
SSDEEP

6144:x51OcGn+06TvvtO6emQchubzygxjZQSOGmM1McDPJbVT:obGvo66nbzyghGSOGmJGtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2198b289c130c472a8f1d9073a5beb02_JaffaCakes118

Files

2198b289c130c472a8f1d9073a5beb02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\QT_Client\cross\MiniQT3.2ForQQ1.91\QQTalk\Output\Bin\QTalk.pdb

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE