386d8d11a5cbee9fabd20559514df964_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

386d8d11a5cbee9fabd20559514df964_JaffaCakes118
Size

537KB
MD5

386d8d11a5cbee9fabd20559514df964
SHA1

990275274f0f4aef06c055c6862247e4b4f7565f
SHA256

229dbdc708d3e8cb18abe5eb974fc0e253aaa9a130f9afab3bab1270648f3a30
SHA512

bed985959704125be9e033652a6a0d8e281291ef4d8df34d723348ae212a9aaa06ad19e801a3a5bb128750d1b9917feaed03f8db0bfcf0a3fd79c9bf97ae4c94
SSDEEP

6144:3YVGfI8ieD2CSwJmsYh66UGLilZINxM7HJvzHG7sv36ekyEGJLC/PKWZIXes/CJr:3YVGvi82Cg6wENbDv3eQhC/Pju/a9W6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386d8d11a5cbee9fabd20559514df964_JaffaCakes118

Files

386d8d11a5cbee9fabd20559514df964_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

u:\global\src\heidi\bin\i386\Release\HPSETUP.pdb

Sections

.text
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE