2c95b042fccb4305d8a7a6f23246744b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c95b042fccb4305d8a7a6f23246744b_JaffaCakes118
Size

232KB
MD5

2c95b042fccb4305d8a7a6f23246744b
SHA1

9ca518eb142ea4967512c6e2e55a65bfd9ed8fe3
SHA256

167789075b8aee6b5fb59f077aa0256eab501eb614bbc62d5e64cb8e9c12ad8b
SHA512

b0908367e5a2b5e7aaed43b263d9c8f05e8050b1c6f8b6f4577d90c6d1d4bb9c967aae11885fd47dcae53209c5ebcb19f73afad9146af643b0aafa282038c202
SSDEEP

6144:T4u/+wlS2FqtOljVFkuXTh1P2w8wzCQHIKJ/Xixr2nR80lw:T4S5p/ke1P2oz5lDRdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c95b042fccb4305d8a7a6f23246744b_JaffaCakes118

Files

2c95b042fccb4305d8a7a6f23246744b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\TempView\Output\BinFinal\QQApp.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE