3ff8c4dda879d223339e59b3dd111648_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ff8c4dda879d223339e59b3dd111648_JaffaCakes118
Size

301KB
MD5

3ff8c4dda879d223339e59b3dd111648
SHA1

b5e33b01073c1619e2d3caf16f64a5649ed183c0
SHA256

0572c7df1141a467933be189299226cd67f286626e68d160e32ab093c7290d7e
SHA512

9992c375464530a67e75ed3d2c5cdbd8f1bb2e79f8ce5a64f01b7e253ab716f73b3c37f55496fbf4ae8f67d58853bf940fc2e43442397e2f5b62e33444170bf8
SSDEEP

6144:8wS9bbFBaXBLzBNoizRmDhR8iQzuV5OZ65wDMeRje:9S9XFeVbvzROhR8/ccAAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ff8c4dda879d223339e59b3dd111648_JaffaCakes118

Files

3ff8c4dda879d223339e59b3dd111648_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\HD_Audio\temp\HDMI_Service\Source\win32\release\RtkAudioService.pdb

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE