6fd1683be245374b61dbdec3856925c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fd1683be245374b61dbdec3856925c2_JaffaCakes118
Size

313KB
MD5

6fd1683be245374b61dbdec3856925c2
SHA1

e1af50a49d2729992d7192728bc3557fe5072e8e
SHA256

166c71ec0aaa8be2f40e6cae9e5127a6ca0b1e0d77c26e4903358942db7f1ecf
SHA512

3ae3b0592cab9336e4653d7fb8df61bae7dea0d8bf9f01b4df99570ae2ba4b5c6c2b25f87d24c87c376f58d20423e36ac45891252b4d0732f59b72f09b3fbf1b
SSDEEP

6144:kqMUuXdiuA2vhViGXAVmRtHtYtFUAowld9awAjmLp6Yh4WOV3IEvEi8pDtAXx+:WUGu25tHtEfVawAy4YhZK3IKepp0x+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fd1683be245374b61dbdec3856925c2_JaffaCakes118

Files

6fd1683be245374b61dbdec3856925c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Xeb\DVDNavExt\DVDNavExt\Release\DVDNavExt.pdb

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE