4bbd14d9a22cfb3a38e33f3a30a1eb1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bbd14d9a22cfb3a38e33f3a30a1eb1e_JaffaCakes118
Size

721KB
MD5

4bbd14d9a22cfb3a38e33f3a30a1eb1e
SHA1

27aaa9a45993e0178ab00d9bf5983f958c124056
SHA256

1330acded64bf6765bb17247b07d6a82ac34e11cdf1df48734fd2069e3d7a9b4
SHA512

e6a60d5fd05758d16cd18b4601d83de546862425bed4211631c864e4ebbb4e63124e190cc737868593a8ceccb00165466db44030b9016da5b2445e1993325375
SSDEEP

12288:o8Ogw7oTMKv/TjD1CSbCqMPFROvw8Y8KRFe4CO+uJyx/VX6WbODqcYgaM2AnHmrj:o+w7YMgTj1/VNbONB2WoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bbd14d9a22cfb3a38e33f3a30a1eb1e_JaffaCakes118

Files

4bbd14d9a22cfb3a38e33f3a30a1eb1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\clientci\workspace\hips_v1.2_fix_compile\basic\Output\release\BaiduHipsBugRpt.pdb

Sections

.text
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE