72d12da3339f7a9118f87445daeb47f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72d12da3339f7a9118f87445daeb47f4_JaffaCakes118
Size

4.0MB
MD5

72d12da3339f7a9118f87445daeb47f4
SHA1

e760d7ceba8da335ed47a2831c17a0e705785b4e
SHA256

e46e2f7a7bc570a0caece7a4d87b35bc00890194caac3ce13bc2773ac3306bdf
SHA512

1a14ed358737d74f770138a6df742bf40a6325d342dfa7db222cb691f34d594f11d03c9405323921c76ea78984974fe6f05a52aa91684c3e884cbbf2b82c5fbf
SSDEEP

98304:qdSjfbtdVi2RkJXQbvr2335ph8lkn5LhNI/SYaZKTG:+qvBk8i3ppheknxnkSYaM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72d12da3339f7a9118f87445daeb47f4_JaffaCakes118

Files

72d12da3339f7a9118f87445daeb47f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Documents\Visual Studio 2015\Projects\WebInstaller\obj\Release\QTTabBar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ