44a5a23c892cec1c511e7749142d4681_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a5a23c892cec1c511e7749142d4681_JaffaCakes118
Size

540KB
MD5

44a5a23c892cec1c511e7749142d4681
SHA1

8875c3a6da6291d2568006d18719032c9bc7a874
SHA256

866645598c03256ebc340107699e8b2966c5718d1cb2b1acc2695a04f2415717
SHA512

19ad91444d287d9cfd66525e1cf8107a7f9d98706b505543a9957f450d7a9a2d9422f4b312aeaf4407c8979c00cc6deb0605361c3ee2ce94e18962599514fd31
SSDEEP

12288:O7rHZ5Qoz1CsqnCN6Ijo2wVWGwF9rQuivNOhj0lkk:OpiGnqnCNj0AGw8N0Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44a5a23c892cec1c511e7749142d4681_JaffaCakes118

Files

44a5a23c892cec1c511e7749142d4681_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\qmfaitojs.pdb

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE