47ab0b99a494fd87bf8c290f5b4e1426_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ab0b99a494fd87bf8c290f5b4e1426_JaffaCakes118
Size

333KB
MD5

47ab0b99a494fd87bf8c290f5b4e1426
SHA1

75c3dd6084ef3e9b344f33170dea414069285d94
SHA256

2385e3e95d2ef30a827750e63110b10699c6d3ed981f1c882edb476d1388e7b6
SHA512

8ea8d23752390a34de6fdb71ccea5dce75e54b0047f87d54f6dc8a96e1ff23d3f459ce9102ecf705fed2afc1dbb3bbdfbd6ee98ac1e2d7a196172627ef1a8c69
SSDEEP

6144:2rYJhHO77b6DomATuKVw+b7eEQl15uDJZE2RVwdTdSZB4ka13A:qYJGGAyQn1Ql18NK2RVEhSZKka13A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47ab0b99a494fd87bf8c290f5b4e1426_JaffaCakes118

Files

47ab0b99a494fd87bf8c290f5b4e1426_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\work\safeguard\trunk\Basic\Output\BinRelease\FixSePluginTest.pdb

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE