7757c7085e35fb7ca26b38a159ea357a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7757c7085e35fb7ca26b38a159ea357a_JaffaCakes118
Size

5.6MB
MD5

7757c7085e35fb7ca26b38a159ea357a
SHA1

4fed763d6a41f1852304f6c98764da26b16134bc
SHA256

0f171e8b5e0252ebd6b574e9277ee3a6f1b687cb4351898a9c1fc10f4180e26a
SHA512

7e25c1625a6b5106c4019f21d795eb3db9911dd0b5082b7f21a6d84304d6a56814a35eccb613599dce04bd735d28fdf746618aa3f4530fbe5f5468cf96baf2c1
SSDEEP

49152:P3UnAxSM2nXgVt/KPm8uCkWDfqO0wSMpiyQTX0FmTGbWjD7lfn0S67pn5c8J/F9P:snAoM2Qyu2rqO0pNTQ8D7pYSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7757c7085e35fb7ca26b38a159ea357a_JaffaCakes118

Files

7757c7085e35fb7ca26b38a159ea357a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Sardinia_SR\19365\Source\run\ReleaseNDBC\finsql.pdb

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE