31113222e356ae5143562cd0ae9e1b50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31113222e356ae5143562cd0ae9e1b50_JaffaCakes118
Size

64KB
MD5

31113222e356ae5143562cd0ae9e1b50
SHA1

d4ce4e876375017f583cdbdbcdbe316ad81857f5
SHA256

0a598fbc35005eab77785598671aadbc248f3e259ab40629500c4a2cd420b281
SHA512

99998f34fac326d61ede1025d8a6d40c24033be210bb6dfb506c8f77ce7075c83b337251a14db24165c80414ac0e2ff17ba3d98202468526546b301ff45d0637
SSDEEP

1536:fjL8UYqusRZHN+R6iJBf232Qxl1D5ljFerDUF7TGXxhf:w/sRZt+R6+232QLADzXrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31113222e356ae5143562cd0ae9e1b50_JaffaCakes118

Files

31113222e356ae5143562cd0ae9e1b50_JaffaCakes118
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\Documents and Settings\Cedrick\My Documents\Cedrick\Backup Office\My Sources\Visual Studio Projects\Unlocker\Release64\Unlocker.pdb

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ