244880f3b60e08304f92d9aaf2ae2013_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

244880f3b60e08304f92d9aaf2ae2013_JaffaCakes118
Size

259KB
MD5

244880f3b60e08304f92d9aaf2ae2013
SHA1

c8c86aa0415adf9e88b8f66710cd7293e075b566
SHA256

06f89791c3782dffc2412ed076b79918aef7e5d14400a40209a41db474970ece
SHA512

2567b16ef8fa7c41b68c1b3a75b27e2067f9d4eb1b0cd62070498c2d81e220ee3f303c7f5d81614de1ba5f611bb7f8e4874484b96a11d743c2e5ef79e46146e6
SSDEEP

6144:1V3Frp6yGOQlBcjgMwaHUo/gnOFpUip4rBwqDapp:/Fr9GOvD/go18wqDan

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
244880f3b60e08304f92d9aaf2ae2013_JaffaCakes118

Files

244880f3b60e08304f92d9aaf2ae2013_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\action\2345\Build\RCImage\bin\Win32.vs2012\Release\pdb\2345PicViewer.pdb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.oli
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE