45cafe0a7c439563a48dcec3e1cbc11b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45cafe0a7c439563a48dcec3e1cbc11b_JaffaCakes118
Size

295KB
MD5

45cafe0a7c439563a48dcec3e1cbc11b
SHA1

6f298d44e809684c122f93a7a5dcf6e06c1f331d
SHA256

062621ccbd1609957562e752fcb150b7569e82db9f3784323b1aa8fdc2ee7003
SHA512

842e961e48e87c78bf1b8121a23364fe42908e68a284b4d205f616905d0a6b1286193ce60c708fbfc77a8941200d269e659ddc8a1d5519b2d388bd42bd6fa0c5
SSDEEP

6144:tnp8Xc5PietX82fzeN9nN5oyObpIbcBokbt:FyXWiMu9NdO9Ibmhbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45cafe0a7c439563a48dcec3e1cbc11b_JaffaCakes118

Files

45cafe0a7c439563a48dcec3e1cbc11b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\SlaveDepot\beyond_slave\branch_union_rc_rep\beyond\bin\pdb\Release\QQBrowser.pdb

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE