3b9f65e35b73468abe793f24febe96cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b9f65e35b73468abe793f24febe96cb_JaffaCakes118
Size

753KB
MD5

3b9f65e35b73468abe793f24febe96cb
SHA1

09c4a43a0b9f9eb60e7748611ae5ec3e35bf3332
SHA256

245b0a653ef0a942f96df260d86942500f05986d2b387eef6aa01dee94abeb64
SHA512

5e1fdf0feca236be308615722f8910f8732e6ee78be40d3f9ebc6b7203b068ca04d74dcb94bfacd96e2dd396a122b8fe21cfe10ee286a60b2b21a5174472f5f9
SSDEEP

12288:tdxHUE7iw48q/lA49xgedSr5E7z+XV7MFzNYtktAEj8yIuiA3WBU1FZf6gDc:t5S8AAmxgeEWGXV7+h4fEj8yI7YWarnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b9f65e35b73468abe793f24febe96cb_JaffaCakes118

Files

3b9f65e35b73468abe793f24febe96cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\jenkins\workspace\暴风主干\trunk\bin\Release\BaofengPlatform.pdb

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE