494e9f754ddc67a1a3bc6ad3843fe00f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494e9f754ddc67a1a3bc6ad3843fe00f_JaffaCakes118
Size

210KB
MD5

494e9f754ddc67a1a3bc6ad3843fe00f
SHA1

4c576ac86dd14df59dad4ead650c915dc3d5138e
SHA256

100a5a78c6ba87930931a9ba60e9d8ea34802a8604db3b8726f2c1a5476b7b3b
SHA512

87a4b5ff0c2ae258cb458dcc4e60bfe29949ace624dd1815cab22cc77d98e161f631ac1c358fb7aa9d0a63ea5d876c0731db0643395a43c810dfc69e1039d4aa
SSDEEP

6144:xOBV+hSaGIV/iqYx7OJJmUIKV3aUMXBIb:G+hSpKqhgTzxVqfB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494e9f754ddc67a1a3bc6ad3843fe00f_JaffaCakes118

Files

494e9f754ddc67a1a3bc6ad3843fe00f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

i:\Hummer\QQ1.66\Basic_Hummer3_VOB\Hummer2010\Output\Uninstall\Release\uninstall2.pdb

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE