40e5669fdf66cace45af8e3691c84627_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e5669fdf66cace45af8e3691c84627_JaffaCakes118
Size

273KB
MD5

40e5669fdf66cace45af8e3691c84627
SHA1

a8f041229eeb3cf4cc8ddfe768d4cfad44b64645
SHA256

14683dd0630aea6a19ccd1de0c5f0a757f5206a42a2b0785c6a31de6e8d47176
SHA512

f4f4f4d8166aac945ffbb64267365470370a44db23fbedb81e5b9258cc674d817579e7ad351cc46e34006e5a26f2e79841b45677add211daf290a37fc57ec447
SSDEEP

6144:Y4qMZvK7bFvMA9qPxCCB29e09/4I8J0vQ4oe:E0qBv3mC19AwQ4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e5669fdf66cace45af8e3691c84627_JaffaCakes118

Files

40e5669fdf66cace45af8e3691c84627_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\haiyan_proj\捆绑\NewDownload\bin\BDMiniDlUpdate.pdb

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE