45d5e6f5868823683d74d248143d2e9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45d5e6f5868823683d74d248143d2e9c_JaffaCakes118
Size

300KB
MD5

45d5e6f5868823683d74d248143d2e9c
SHA1

e1fe66338e1010d3c3fc2521511b7f055339f9b8
SHA256

104e59e9e93f2cca352f97cd3f58b626e4e7ae4513e3115d53edb6d89833ab95
SHA512

244af733228ab5c9804710de519a1414cf2a53e5af445c1533358e4b9e485575e83611cdc4e7f00598cf5275968f2c5572a0d2770d419c232c540232094b4470
SSDEEP

6144:DH8U95EB3LDWkmtA+BYtdP6Q1T1AMBfrsMWFLtS:T8U9SB3LsA+O7P51TPfYvttS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d5e6f5868823683d74d248143d2e9c_JaffaCakes118

Files

45d5e6f5868823683d74d248143d2e9c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_apanz\Main\code\build\win\results\Release\info\Adobe AIR Application Installer.pdb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE