4ea12419434876a78aa0f99f57b64828_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ea12419434876a78aa0f99f57b64828_JaffaCakes118
Size

469KB
MD5

4ea12419434876a78aa0f99f57b64828
SHA1

c9c9ee93610075f7579d6bcb53032966d730ee95
SHA256

21bf912184bca9e40fb0c10de398e05ed239202d8e50175dea958407490ccebe
SHA512

65c6e4c8a7858bb8c8f3ea1a7933d1592318e6c0345d36fe9289fbee47ba48569a371859b5316e05edd3a5b86a25502a5e463ff646684fb8d51029bfd4a0ac33
SSDEEP

12288:A5PphU2v8T6G7PEgqn62sssssssUSz1Goq+7YmuHJ:iBI+G7PEg+62sssssssUSz1vYvHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ea12419434876a78aa0f99f57b64828_JaffaCakes118

Files

4ea12419434876a78aa0f99f57b64828_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\MySvn\360se5\trunk\bin\sesvc.pdb

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE