37c4d17144271691889e2c477ebdc4b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37c4d17144271691889e2c477ebdc4b6_JaffaCakes118
Size

485KB
MD5

37c4d17144271691889e2c477ebdc4b6
SHA1

d027fcaaa50a1948793d9e5b783e561d8f47a812
SHA256

e8718ebb68521f9302d57d8fb720697b2adbd3e030443f3cb0c2ae3db54e18da
SHA512

9789a8ed5ede73c4ba02cf99ab4e0b2044dabf8eafabf00fff4716456ed4e2fa7acae1cf448ad2363611db776239173f7ac63affd8989006e69db1003e17a433
SSDEEP

12288:xq1vLZYlozOuiok4AwUvWxeZp0NffDr3+cE:xczHiok4AwWW0sNnf+cE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37c4d17144271691889e2c477ebdc4b6_JaffaCakes118

Files

37c4d17144271691889e2c477ebdc4b6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

n:\ARM\BuildResults\bin\Win32\Release\ReaderUpdater.pdb

Sections

.text
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE