5c05d17be10997f6271f34a2c995ed91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c05d17be10997f6271f34a2c995ed91_JaffaCakes118
Size

769KB
MD5

5c05d17be10997f6271f34a2c995ed91
SHA1

d977aa3a0f9576f2e41297f0c078f04554269c0b
SHA256

36162f2f38cfc90f163f7aeae639bbe2c949025a0bd9ed5a78c8a1a1ffc0d1e3
SHA512

2a8284f02a8b61cff9acbed6c65063758c3df7c2dac6d77ccb4e7496c547dae08d86273136dff6c92384bf9b482f22d0ea822565284b0caa1e50c5f07a0e3b35
SSDEEP

12288:6OBOWHgN+iJ8ZkNSe+qvw9f+osKrjQxUCZJqeTVC8ddC3QdHH:Lz6Se+qvwDsK2L22k3QxH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c05d17be10997f6271f34a2c995ed91_JaffaCakes118

Files

5c05d17be10997f6271f34a2c995ed91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\ravip\dev\work\yupdater\135_20080915_1958\Yahoo\yupdater\Release\yupdater.pdb

Sections

.text
Size: 428KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE