45156394dd2852456e20d2d389f146f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45156394dd2852456e20d2d389f146f9_JaffaCakes118
Size

337KB
MD5

45156394dd2852456e20d2d389f146f9
SHA1

d6e7089fe3e1e6a730bcd53c326b5e6ebf3b26ab
SHA256

13a9c029fd7f19f8473ae38e4cae1228b826363320f472e8c6ea223b5c47d910
SHA512

d1aa0682a9dcc3dcf092bf125e524ac2fa2c48c94dcf5a4d002a2d64fa96638d398645fc18993e81e328c066782204647748a99993bc6d149d75e5839b2a9e8f
SSDEEP

6144:XYJbOaUmbGk1WUngAiVgjhyBM5ukwooTfzfnJ00DztsJ:oJbOYBcUg7MyK5DonHsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45156394dd2852456e20d2d389f146f9_JaffaCakes118

Files

45156394dd2852456e20d2d389f146f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\code\haiyan\GameDownloaderOld_Proj_bind\NewDownload\bin\BDMiniDlUpdate.pdb

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE