4134fc52c91ca959c957e43b07e29de4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4134fc52c91ca959c957e43b07e29de4_JaffaCakes118
Size

441KB
MD5

4134fc52c91ca959c957e43b07e29de4
SHA1

d9c653cef0047a2051a8a6916463cac59d04afcf
SHA256

14f53c277e596142470e13017cce9d04a9a35d9dab67bd8abe3ac0c2e618af04
SHA512

7a0ac93cfd52a7be04a2765e7d99360a70079254bf078be75c84d99d51d07410d50c09dcd4aa6195c751ed8a106d7e2d9af0436b8de59742cf51dfef0f164884
SSDEEP

6144:GksrTuEKb8NPxHQxs8toctU/5joLSJVyzsZNDcpqZMpBzCMBaI6lv0Gy2tXPa:MTuEzJHQx+cvsRcpqmBOdr0zAfa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4134fc52c91ca959c957e43b07e29de4_JaffaCakes118

Files

4134fc52c91ca959c957e43b07e29de4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\clientci\workspace\ime_compile_trunk\ime\Outputs\Release\PluginInvoker.pdb

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE