3d1ed87fd87c2a6ed91700b73567856c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d1ed87fd87c2a6ed91700b73567856c_JaffaCakes118
Size

506KB
MD5

3d1ed87fd87c2a6ed91700b73567856c
SHA1

c1450b0f13cc9ad409950174f78a69b8f4917877
SHA256

2056083260d2af2a97c7cffc5261cbe3fb38107fea03b4f674b37f6461597933
SHA512

9ad5a679173bed034cbbb3447e1dcd26cd8e52c1473d63b6ed73e5a778b9b930b456a1b47d8c9b4f129beab43ea45908b8726a4dae6a04a841f78734cb0686c8
SSDEEP

12288:Qxfh6E/AQ5AKiYs/aRU813jh/0ZH++YcQDWYUTVvc:Qbpfc/aRt/0ZHKcQARU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d1ed87fd87c2a6ed91700b73567856c_JaffaCakes118

Files

3d1ed87fd87c2a6ed91700b73567856c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\TempView\Misc\Setup3\build\Release\QQSetupEx.pdb

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 544KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE