2e0e49b1645fcaa5a5ae0ba3256922b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e0e49b1645fcaa5a5ae0ba3256922b8_JaffaCakes118
Size

196KB
MD5

2e0e49b1645fcaa5a5ae0ba3256922b8
SHA1

18dadcd79df8286aed76e1e6c0dd601c7b75f6b6
SHA256

140b6c2bebef00f80fb18ff10bd7aac0031e4c236cd1d2c769eb5f3fb724615f
SHA512

50909e90d93b1d448c763c264118dc604949f522b78eb71e8c218d5c6f0a36fd857ff70d2e55955fb1a4e64462a5e5414b24a081626f43b911013554bdcc3960
SSDEEP

3072:NXyo4OnYg74Pzp3rRh6l8MUbJYi7OFOQA0UKp3M4T+qMRpsG/qzf/PLKSZjf:IOnl4Lp7X6l1Ub6wOTUwtyVpxe/zjjf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e0e49b1645fcaa5a5ae0ba3256922b8_JaffaCakes118

Files

2e0e49b1645fcaa5a5ae0ba3256922b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\jenkins_Trunk\workspace\10.9Patch_SourceJob\qqpcmgr_proj\Basic\Output\BinFinal\QQPCLaunch.pdb

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE