42e85dde887327180fbdc3464fbff239_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42e85dde887327180fbdc3464fbff239_JaffaCakes118
Size

288KB
MD5

42e85dde887327180fbdc3464fbff239
SHA1

9aef20592026ad7ea97400bb9f375a6f1406f669
SHA256

15a7051836f12f812df43e136c1feb1c86ee2fd3a562f3832e8d1882b916c1a0
SHA512

6738e5ccc612094bb8570590a39c1803a01f8e95c9b1963bbe56ef7e6c512c3d74b467c55353bf3b0aad3ec2fa569dc7d6c100931014a1bf0727baabbfce2644
SSDEEP

6144:i3HLqHWerxEh6+CM9IoH+SiQcU0S4vAuBYA9SABWWdA:i3HLxerrAFH+SihU0SwAum1ABLdA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42e85dde887327180fbdc3464fbff239_JaffaCakes118

Files

42e85dde887327180fbdc3464fbff239_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\4773\source\Running\Release\QQPhoneManager.pdb

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE