6fc9efbe454af6749f020da079118402_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fc9efbe454af6749f020da079118402_JaffaCakes118
Size

513KB
MD5

6fc9efbe454af6749f020da079118402
SHA1

1433cce3b1878066d162579886cd884d27eb9d7d
SHA256

1e2d997431e5e4fded51564d88ec54c48b86ee4c64827c4b3449cf905e5b685b
SHA512

c9bd632d2939b80c5acdcf0277ddaceb586cae780a58a5a897ca124c32334b14643eb2eabfd6024c0a2c1a90f142df85f048fe5aca0ccf993d7608d39eee77f2
SSDEEP

6144:Aik28wHvOQLTZhBDsw0XwWwoqjLyATkBnRURuFsYC7sYwmICFyCXeSs:AikrMdLTtDd0Xwj7jWhBR85QmICFyjR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc9efbe454af6749f020da079118402_JaffaCakes118

Files

6fc9efbe454af6749f020da079118402_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\prj\deployment\201006_Release\rc\MOD\rcc_host\Release\clienthost_u_u.pdb

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ