4e5f8a874a35310a9202820f8e7d9971_JaffaCakes118 | Triage

Sharing

General

Target

4e5f8a874a35310a9202820f8e7d9971_JaffaCakes118
Size

345KB
MD5

4e5f8a874a35310a9202820f8e7d9971
SHA1

988a3c745c11c05eede0990fefc78b9c95235bc4
SHA256

116f6daef2701c2d78dec742f4bf4d37b625c908117a23774173a984876e5e32
SHA512

f417b88a0f0400ac2f794d09dd1a1b644faa1026c9f4a56390e75e81692a1cfe5d186886d74de57522363ae7dbc3fd91adf500bd7826091418aaa000a3881b68
SSDEEP

6144:7bp2x30h+0jf+CPGaXwqrdRk0j0iZY585VLfmF:FmagydRNA54L+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5f8a874a35310a9202820f8e7d9971_JaffaCakes118

Files

4e5f8a874a35310a9202820f8e7d9971_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\src\QQMiniDL_proj\trunk\QQMiniDLUI\Tools\win7_setting_32\release\win7_setting_32.pdb

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE