2f7ae53a207a1b328250a241706b6723_JaffaCakes118 | Triage

Sharing

General

Target

2f7ae53a207a1b328250a241706b6723_JaffaCakes118
Size

227KB
MD5

2f7ae53a207a1b328250a241706b6723
SHA1

48ba598d591ff9b27394b972e4b023171bc3f32b
SHA256

15e535f382301bd6bd3cb68daa378105c4c850a7a40bb0da522c1dedd5c2879a
SHA512

db7fbb0e31c670b25c09dfd46b249ac59268a71e8ba50e4ddbeeb196b6182354b5e332b0e50d8ea2e8b809a474f3ddbe67bd078f7d57186d777c3219c9267d3e
SSDEEP

6144:RLQnAJpd9cx6PWLLdTptA2iTI9zmjBncvFe2T8:RsnA/bPuxptAI94ngFxT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f7ae53a207a1b328250a241706b6723_JaffaCakes118

Files

2f7ae53a207a1b328250a241706b6723_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\project\sogouime\branch\PinyinDev_R_7_2_SmartInfo_Update\Bin\SogouPdb\SogouInput\SogouImeRepair.pdb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE