309843ede829ea8b3c07e5356aa2f29f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309843ede829ea8b3c07e5356aa2f29f_JaffaCakes118
Size

237KB
MD5

309843ede829ea8b3c07e5356aa2f29f
SHA1

727ff6d44843964e677ce91037b25636b4a9d5a3
SHA256

5acf8e299445a85d421aa9f2bd21f9c3c6911ce8554ebce8854560e6dd60652e
SHA512

9a8fcc782a1248945127c1d957555a40055611bfb0b8b1c5421b33abada4ab6a848e120cca54ce21126ea543e96b9dc1e3d2c0a07c68d593133977acf05d29e1
SSDEEP

3072:9JH5Hnfzef4YlFY+PWz9HNq70SmY4CukFJhTw7Z6O2klOs9:xnigYoBNqZT3FH880su

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309843ede829ea8b3c07e5356aa2f29f_JaffaCakes118

Files

309843ede829ea8b3c07e5356aa2f29f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\work\p4_localhost1666_MARTON-XPDEV\3am\main\RA\Service\x86\LogMeInSystray_ldr.pdb

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nkh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE