32c037353600873993402997ced4d91c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32c037353600873993402997ced4d91c_JaffaCakes118
Size

15.6MB
MD5

32c037353600873993402997ced4d91c
SHA1

2b56a33c977e7c07a88769a722357bbb30576a4b
SHA256

b9148dde1274817c7990fac74bb59eca899c53a7e05c62ddd0d521d2551f5cda
SHA512

89878abe270d71abe1ac304e433378485ebf327b0d255ef282ace78c969bc9a80e3b9e063c527a8c323fc1137a51e2fc9dfb8f2756784eaf22863304b0af189b
SSDEEP

393216:EAdUZM6BJwTk/ihc3241tf+b2zajahbW3BDJz99pG:Hc5JwTm2m+bL+kxDJzTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32c037353600873993402997ced4d91c_JaffaCakes118

Files

32c037353600873993402997ced4d91c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\BranchAI\win\Release\stubs\x86u\ExternalUi.pdb

Sections

.text
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE