3ea892669fad8e740855b49c6e3f0465_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ea892669fad8e740855b49c6e3f0465_JaffaCakes118
Size

605KB
MD5

3ea892669fad8e740855b49c6e3f0465
SHA1

9c625b159ee9a9e5705fc0332b1b4fbb31d07c2f
SHA256

6b419a599ca36048536240665a319965f191157151f0858946742e699b1089d2
SHA512

420f74dc8ea54e7a1d1c8080c1f3ffc2e2b27fcee3c3bed059725105d92a4a869583b00226cad9e72352f51d8cdd62ba015c55f267a2a96f026f3b4ee5da50ae
SSDEEP

12288:AWoWdugZxo9jFrJqlbZXxE9B4emsc9WMbqe4eIavKcuc:AWRvo9jFMFXa9OemsgW2hhvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea892669fad8e740855b49c6e3f0465_JaffaCakes118

Files

3ea892669fad8e740855b49c6e3f0465_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\KINGSOFT_DUBA\Build\Build_Src\kisengine\kis_sp5_release_pb\product\win32\dbginfo\kislive.pdb

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE