45351d8e09d48b97d5934d14e957c656_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45351d8e09d48b97d5934d14e957c656_JaffaCakes118
Size

237KB
MD5

45351d8e09d48b97d5934d14e957c656
SHA1

fedaf9c17e0679e28d790c3888e84547ec148c32
SHA256

1a3788c2dfd8172a409808b47b67beb899ae213a9c103c36c30182feabff7b3b
SHA512

69059f5a1934b7671731e1d6213dc623332f58b1035b0f28edcd8f28fbebe03b09fa8580208a6ae77409a361c958b4dcc300012e2214a6a6d4a6088cfcb855a7
SSDEEP

6144:P0HItgWcF5Lr6bvOJ2VYB0JMyXdrpnv6eAwq:P0HIAL4vOJ2V8yXdrpv6twq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45351d8e09d48b97d5934d14e957c656_JaffaCakes118

Files

45351d8e09d48b97d5934d14e957c656_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\XLStartKankan\Release\XLStartKankan.pdb

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jgd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE