46db0a1ecdb382e23a8c8ceace3c64ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46db0a1ecdb382e23a8c8ceace3c64ee_JaffaCakes118
Size

367KB
MD5

46db0a1ecdb382e23a8c8ceace3c64ee
SHA1

9fb802f8f05cd3dfdb2afac1604c466c15a53c48
SHA256

13dec02764507ed9e7c2d9c069fa31d02037ee1797ecd9cc445812c6d63560d5
SHA512

ab1b89658a622a8bff11e0198769813bd16afc35a3db21ef40773ebc963c2afaad64dbaf43dc703afb2cff173e67ccd19c728292027d6f9255f64bad52e311c2
SSDEEP

6144:8vL+JLGpAkOOiZ2D6YmxXdL+Ro+4yatMYrRie+/8llozi6G+ZXEfJ8kgVqD7c:8v6JS6r2eYmxXsRk1xgeTii7IUh88D7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46db0a1ecdb382e23a8c8ceace3c64ee_JaffaCakes118

Files

46db0a1ecdb382e23a8c8ceace3c64ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\project\win32_component\xlbugreport\bin\XLBugReport.pdb

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE