36bcb4b01aecad4458912f6d8116ae35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bcb4b01aecad4458912f6d8116ae35_JaffaCakes118
Size

351KB
MD5

36bcb4b01aecad4458912f6d8116ae35
SHA1

af3b776eb646ab5b325112157e13fae41d249d58
SHA256

626fa77d92ae93d6b330fdb2b1e4950ec6a6a9a497c10b29a52242032a57b789
SHA512

7788ade6a9f4c343b8be59a98af2d67e508fe709a2e302cacf8638b3109160b3d49d340c1766c65e1cbf0270660f263621e422a63cdd7d66486261265c118fde
SSDEEP

3072:bdmUpMMrXEJYxcU1X+GtREBYwtR1C+GE35N0TeQjxsZffkT2gGMJfonNKEMWzkiL:bdHxcEWtR1vieMOsTYqfoncErIy1aPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bcb4b01aecad4458912f6d8116ae35_JaffaCakes118

Files

36bcb4b01aecad4458912f6d8116ae35_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cygwin\tmp\inst~1\src\pcaudi~1\releas~1\ultrap~2\pcaudi~1\src\psphase2\audios~1\objfre_wlh_x86\i386\DTSAudioService.pdb

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nkh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE