34d6433c36eaa38baf96d06543ea1b91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d6433c36eaa38baf96d06543ea1b91_JaffaCakes118
Size

227KB
MD5

34d6433c36eaa38baf96d06543ea1b91
SHA1

5a761ebfc298690c6dcb16dcf29fa69ea092f922
SHA256

24588164171b908628e95dc92c8bdc6245576a901e05f6329748eaa09ef8058f
SHA512

eed2d621abd86ce45000291e81612dd84636d02daac935eb334545234cc675d70de63ba600edcb59e8670ded4b32c8b79fd33e767c173ffe382f10d1265b0d12
SSDEEP

3072:G2S8QsV9P5KA+jvRksPwLkOL8pBGjQC2Hz0bq7W81ZT5rbFGQmRHTrSEyqaWBN5m:X8HS8r0J+0baWS5wf3SRK5f8MnMPoabT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d6433c36eaa38baf96d06543ea1b91_JaffaCakes118

Files

34d6433c36eaa38baf96d06543ea1b91_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\WORKSPACE\program\MsWork\BOCOM\InputControl\02_Code\SetupCmd\bin\BocomSetupCmd.pdb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE