781bd2a6085ca456ef05b8b01cd50f7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781bd2a6085ca456ef05b8b01cd50f7b_JaffaCakes118
Size

176KB
MD5

781bd2a6085ca456ef05b8b01cd50f7b
SHA1

91fe0befc4f177795aeabaab44e7d184b4624721
SHA256

e195266af9455ae2cb71f32aa2cbe6f25dd1538e27d8925a64c7600e2a7c12c2
SHA512

cc10fbe41178c041be4ea085769295b7975b780d2f25f2abbf1a7a61c0c2f08c22c424750e0397633cd5da0a45a6e806bff8942a2ca10d8785ef3ec6bd9fdbc2
SSDEEP

1536:aFLfrLq1YD5qEqqTMsq+THwWmJ5TWo4+2Yy9IWKaWph3YgBgF8SsvulB:OfUOBqfs01Tt2YyO/YMVulB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781bd2a6085ca456ef05b8b01cd50f7b_JaffaCakes118

Files

781bd2a6085ca456ef05b8b01cd50f7b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

x:\Projects\ProductwiseToolbar\Sources\VS_Projects\ProductInfo\Release\bin\ProductInfo.pdb

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ