59dfa5dbc786bb3f592c30d31f990da1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59dfa5dbc786bb3f592c30d31f990da1_JaffaCakes118
Size

972KB
MD5

59dfa5dbc786bb3f592c30d31f990da1
SHA1

ac634c8a776d6853f5a61a73d083777a46ee1b43
SHA256

864539a845ac2a7be6eee6c33e27f00edcbe8557ab967846d9f68319c6f2a425
SHA512

45e5373d85c6111dce2450211c50cd87a2bf01ed995e58abc83485fd36b8dfbb04ca6978a60fd5b784933683bb3135f8d8bbfb22197e80c01f9a7873a97c979c
SSDEEP

24576:tqZ5Ck30rqHdb8HMlaJ+V47f82NltOlP8TzrKrTAsb6UlTq4Cgk84KSYJ+:tqZ5Ck30rq9w7k2NltO+TzrKrTAsb6UI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59dfa5dbc786bb3f592c30d31f990da1_JaffaCakes118

Files

59dfa5dbc786bb3f592c30d31f990da1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Dev\Dev\ToolbarInstaller_v1.0\Release\Uninstall.pdb

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE