4677d2f6ef3c8d332c033a8393032498_JaffaCakes118 | Triage

Sharing

General

Target

4677d2f6ef3c8d332c033a8393032498_JaffaCakes118
Size

462KB
MD5

4677d2f6ef3c8d332c033a8393032498
SHA1

bdbd81565aee7cbd68f0e98a60b4ce8ed86ea5c6
SHA256

22616b612d03f0a0311263aaeeb8283338445092cd99e6d3c1c55af380c6f161
SHA512

bb157969e4effa5c4d1708b5b005fc696551bf164f43ca35f4d843dcb2c19eb4cd797e6bdcee95d8d911ea1f9ab20c0955e1f0a1d49e5b883779c3822c653470
SSDEEP

12288:orjEZEXUoSIgCW4EDCKnPK5XPr5ov8vE0Ge6m0:orjEZfodhW4EDLPK5XT5o08pH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4677d2f6ef3c8d332c033a8393032498_JaffaCakes118

Files

4677d2f6ef3c8d332c033a8393032498_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\QTB\trunk\QQ_Sync\QQ7.1\OpenUrl\ReleaseNoDll\QQUrlMgr.pdb

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE