8cebc9933bce986debea60f2a6bd5d9c_JaffaCakes118 | Triage

Sharing

General

Target

8cebc9933bce986debea60f2a6bd5d9c_JaffaCakes118
Size

403KB
MD5

8cebc9933bce986debea60f2a6bd5d9c
SHA1

d2e34e684f8d8c5dca3502c63ad9509c1f13fc05
SHA256

05a593a6704df9bdd344dd453923ac8d18116f8ab7020d3b60f355d68663904e
SHA512

866d7c28d84940863622ea307caec0dd1a398d6a99f83d9f434cc391549c5d730aefd49fb445a5758968d4325d9fce345e0f5ec52d48eb1f763ad88d4e382a45
SSDEEP

12288:STPCqofxMkVA770KcDU9iwrR/XbX+k8s5uns5:ST8fxMkVC7C4wcxbX+y6s5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cebc9933bce986debea60f2a6bd5d9c_JaffaCakes118

Files

8cebc9933bce986debea60f2a6bd5d9c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\BuildEngineSpace\Temp\efabed19-74c0-4de4-bb8d-a3e5f8c8b2dc\build\Win32\Release\McComponentHostService.pdb

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uro
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE