2a533c99db0eb7e6bd215352ab602cdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a533c99db0eb7e6bd215352ab602cdf_JaffaCakes118
Size

353KB
MD5

2a533c99db0eb7e6bd215352ab602cdf
SHA1

b4a5441464138655475112b52704e408f9aeb65b
SHA256

10a9c694a4f79332504febf59b6f4d6524fa5ad1d488386d7c8d8bbb5a094a05
SHA512

41ecdc67c951ffb50d66bfa50870b54ed76f691f55b9128f96ed7d8086ebc8b6e68c1ce1ee72d58026f3f68f6767bf1ef848573481fcb9d3fe37c118d905661e
SSDEEP

6144:76HBjK2JgvWIn1EvpTBDXGnJ4KOmReYXktBnsg6HAh9t+KzjnpxDnHjzYSQDY62O:cBBJgTEvpTtXB8eYKBsNxK/zDnHj8SQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a533c99db0eb7e6bd215352ab602cdf_JaffaCakes118

Files

2a533c99db0eb7e6bd215352ab602cdf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\MiniBaidu\Basic\Output\BinRelease\BaiduBugRpt.pdb

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE