39ace5a63f242abea06606aed5095582_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ace5a63f242abea06606aed5095582_JaffaCakes118
Size

485KB
MD5

39ace5a63f242abea06606aed5095582
SHA1

f4deabeb1fac870353df4894782dbb064f241508
SHA256

15839cbbed9b391952a104a293c29a7044cb721c78933bce4ce18bda4679f3c6
SHA512

8295a6df9829122bf97513b9fc5387b2ba3566f5d9ee9a1d7d32d52c2006c456676d27aa635800374912b5a527061cfaa6647080fc26c4c6d25d9111d90d2f7f
SSDEEP

12288:Dd8mJpcc+LN/Dekk4UNTAyaDsdDGqnBfGX:OmJph+5/DdPUNTAy6sEqn9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ace5a63f242abea06606aed5095582_JaffaCakes118

Files

39ace5a63f242abea06606aed5095582_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\KINGSOFT_DUBA\Build\Build_Src\kcloud\kcloud\src\product\win32\kdumprep.pdb

Sections

.text
Size: 232KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE