3f5f828f492f2c504cdce9fd1d480017_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f5f828f492f2c504cdce9fd1d480017_JaffaCakes118
Size

77KB
MD5

3f5f828f492f2c504cdce9fd1d480017
SHA1

176ea110c91a6ada090dcef6216b1598a8a3b12b
SHA256

b483887b738b871524b1b9cae4a88d73b9fa71b05e76953e43318852e58d918a
SHA512

e3b240563fecd54af7a2530a420887d028efdb19154e2d96885c98f55843bd06400b21962b63ed2baa86d6ec18e131f782d9b5cac452ee454afd49b78027f03d
SSDEEP

1536:Cif/Ca++eHDpQW0Jyq/s4cH0KDpq0QKOc+f:DpApQW0JezOc+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f5f828f492f2c504cdce9fd1d480017_JaffaCakes118

Files

3f5f828f492f2c504cdce9fd1d480017_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\작업\스마트팝\SmartPop(pandoratv)\Release\Uninstall.pdb

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ