00ffa3a73a509d25e9329af58d84cc95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00ffa3a73a509d25e9329af58d84cc95_JaffaCakes118
Size

435KB
MD5

00ffa3a73a509d25e9329af58d84cc95
SHA1

8fb41c09080e6c66c74898293058b3d88b47264b
SHA256

4fc71a5adb71e4c47616a3862e71a22338a379686a7c476be5662a3643a36693
SHA512

64fae4290755172edc582df90c9f6c9d3d2b3a347a84e208238ea7c34bb7bbaeadd27255fa8c26b114c777d645a8fab69f08d21ba90e29f9fb988b76406bfee2
SSDEEP

6144:jtrZLmR9Ua6MAhVKPAOzVTGhUYjuJ8O4qFVHt7d3vBD3J:BrwR9UjVXKPTmVzO4kVX3v/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ffa3a73a509d25e9329af58d84cc95_JaffaCakes118

Files

00ffa3a73a509d25e9329af58d84cc95_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\bld\nview\v52\nView\bin\URelease\nvTaskBar.pdb

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE