357495a6f0cfaad001b6e9ebe8bcfd8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

357495a6f0cfaad001b6e9ebe8bcfd8b_JaffaCakes118
Size

332KB
MD5

357495a6f0cfaad001b6e9ebe8bcfd8b
SHA1

ce45bf54f754bae65f97abdaf67041b2c5c9061c
SHA256

201c459cffc432923b55777e5a51fc69453a46870c89c28d38e05042dc4b7ec1
SHA512

b8ebcf7647ec5525b0b6a3b47c048fd91286b06c2f92cad0d99e574da0feccf53dcd75de8292d3f6382afc8fab9414ee57277ea33251ae81f4a0423292cf2e51
SSDEEP

6144:Q6vpEt7OZPrKDjk8F9waAPEAoFC66zFBBEfyfehATh:Q+EVHVpAP7QC66Ii

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357495a6f0cfaad001b6e9ebe8bcfd8b_JaffaCakes118

Files

357495a6f0cfaad001b6e9ebe8bcfd8b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\work\xunlei_uiengine\pdb\ProductRelease\XLUEOPS\XLUEOPS.pdb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE