2af05293dba90b3804fd9654097c2872_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af05293dba90b3804fd9654097c2872_JaffaCakes118
Size

351KB
MD5

2af05293dba90b3804fd9654097c2872
SHA1

c80b68af48cd5e1652f260ef8aadb3720d86d1b2
SHA256

438e424ffb9704b89998cf66a6a7c62e31a3b6b182f014456dc63d7bafbcfff0
SHA512

83fda5e9f1d43b433338d0a76cc434dd42439e63f70f8cbd2df1d372b3e5bd4a816afc3a888c1b10e3dd07abbf89c60798cbc617bdafdea7745b19cda7ec501c
SSDEEP

6144:MkbHTiIubE3jZhZsbpvqwowowowowowowowowowowowowowowowowowowowowow1:MkfiIu+ZjApr+VkZgaDfyb1uOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af05293dba90b3804fd9654097c2872_JaffaCakes118

Files

2af05293dba90b3804fd9654097c2872_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\pulse\recipes\283718449\base\branches\ci_release_branch\googleclient\ci\build\ship\obj\service\GoogleUpdaterService_not_signed_exe.pdb

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE