48588029dd1762176a13728acf9be403_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48588029dd1762176a13728acf9be403_JaffaCakes118
Size

567KB
MD5

48588029dd1762176a13728acf9be403
SHA1

bf750608d6ccf4880baed4da2e50deac41e1b9bc
SHA256

2465769e897bae7018e6b6a1bda90f37f2439619b8087f3f78d18aae0a486383
SHA512

8cb58dd133a82af6b1fce1b3c84b446dd7e2824d529b069ca9cba3c71ee87345765b0d9b68b4546be9bccaa8a35ee63a7831ccb4ddce08efab3ac014e9c58f79
SSDEEP

12288:yDf/Zg4N4MKZXR53xD8EHYhOkcSuLT9ukeAESAkDsxydHBVu/M11KEd90tt0gNTW:yDHvKZXR5BSOkcSuLJukvABYHSk11K0R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48588029dd1762176a13728acf9be403_JaffaCakes118

Files

48588029dd1762176a13728acf9be403_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\updater3.0\build-rel\build\releases\build\aamlauncher\vc10\outdir-Release\AAMLauncher.pdb

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ifc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE