309bb4d0db88c55a823376c27af31415_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309bb4d0db88c55a823376c27af31415_JaffaCakes118
Size

492KB
MD5

309bb4d0db88c55a823376c27af31415
SHA1

c50420c2c23b5089fd170023a781f80dc9c17994
SHA256

2dd4873af7dd6f193120eabfc214f0845c7a0dcf572662d2f9f0af6538bcd6c8
SHA512

45718e0fa25352a6b9f81902ed83e72782f08e62c77a433d00a0e7464af864f4d4478ea91300806846c5c4d8b2e06a1bb1b6124294fceb854f95f2b3a81d5e6b
SSDEEP

12288:AZh1KVUW0MMZdgfMMMMMMMMLMMMMMMMMMMGry3OdLNKVVgtCDwnmOITMxKgH:AZh1KKW0MMEfMMMMMMMMLMMMMMMMMMMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309bb4d0db88c55a823376c27af31415_JaffaCakes118

Files

309bb4d0db88c55a823376c27af31415_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\binaries.x86ret\bin\i386\Optimization\opt\wpf\PresentationHost.pdb

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE