31fea611849a02f6a4a572cf691f464b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31fea611849a02f6a4a572cf691f464b_JaffaCakes118
Size

462KB
MD5

31fea611849a02f6a4a572cf691f464b
SHA1

a32a06cee72e17a0458d659a9f5130b62f80af61
SHA256

05c7e2b9960c965cb559728bf75d3145ad13ce55d2b7c87b6fc72d7146cacd3a
SHA512

b22dd5dac6adbeef2e740d325151ee2c9f000c61c8231c29965e9f3c52620bf9fd7e936321f99de2f5b1b1560403f1484c7690343363fb68e85a7f2a95d6dbdf
SSDEEP

12288:sRS3Mu0wjd8Ub3SNTjM5Db4TQGjTSAEOBbC:sUUw5rSe5DbJG+We

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31fea611849a02f6a4a572cf691f464b_JaffaCakes118

Files

31fea611849a02f6a4a572cf691f464b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\3.0\c3p0\dev\target\win\Release\AAMUpdatesNotifier.pdb

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE