3a5e705a50d1df309de219dde5c42594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a5e705a50d1df309de219dde5c42594_JaffaCakes118
Size

300KB
MD5

3a5e705a50d1df309de219dde5c42594
SHA1

846b751b767d9ac5ec647bbf9db7e3d61d70bc5f
SHA256

21ec40fc9ec6c9b47899d7f39450982e497cb9a49ba7f33d7085efb3f3f9eea7
SHA512

d540be423b24d4f94825955d371e86898e0d9a96c84a6e92622f73782930b0837e2389026269ee88a613572cc8ad16a9c12c5b903129f7c62a2f81e0dba5a698
SSDEEP

6144:5c2ofsB5bxLi29qSzWODqO454D5kkbr1Ji93CQ4:5c27B5FcSSO+O45A5uO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a5e705a50d1df309de219dde5c42594_JaffaCakes118

Files

3a5e705a50d1df309de219dde5c42594_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\BuildManager\TestRelease\TreasureBox\build\x86\Release\alicsrv.pdb

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE