44af62e35e7abd984389fcedd1fd29fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44af62e35e7abd984389fcedd1fd29fb_JaffaCakes118
Size

289KB
MD5

44af62e35e7abd984389fcedd1fd29fb
SHA1

360b97427367645b7ff865fb86f5251595fbe696
SHA256

1261c702dac0a89f816b20a532657303c418e26ccca9ce2a047ef8e9d1986d6a
SHA512

ca26544f0bb6b7f23515751b8219817e5be134dbfaff67a7f89c93f70dcb72d56560d5757d6fcf3f48c87d9d7beba31d39b06406b21291b3de5c895fe8a3cb24
SSDEEP

6144:6ZqAFy8SuZw/7t5GZyks90DGOzSMw/FwGyMG0WUQm1CF3BFDW:6ZqAFy8SuZw/7twZRs90I4MG01QR3BtW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44af62e35e7abd984389fcedd1fd29fb_JaffaCakes118

Files

44af62e35e7abd984389fcedd1fd29fb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\DUOWAN_BUILD\yypublish_build\console\source\yy\bin\release\yyplatform.pdb

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE