8dc51b01fbd77c237035543d33d1e200_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc51b01fbd77c237035543d33d1e200_JaffaCakes118
Size

484KB
MD5

8dc51b01fbd77c237035543d33d1e200
SHA1

333aa30ee842baaba02fc7225c576d3e083bc87f
SHA256

116253438820dfcf83388d57aaff9dd5b08f5640065314bc47ad5774abe8ae21
SHA512

ba02fd8c31258ad808558c03f1c2d098cb96726077ab9af132ccd8481185e411e3f4af837441aca037fc699c353bafd45cf3b1760d680f9bb239a1cab0e4a8e8
SSDEEP

12288:VSXWhbOWlSnkH/nCfKCDLu39/bCjS3a23wOMYyK+:1bCnkHvCfhDLu39WG3z3wOMk+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc51b01fbd77c237035543d33d1e200_JaffaCakes118

Files

8dc51b01fbd77c237035543d33d1e200_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Hudson\workspace\Release-2011.05\checkout\rc\MOD\rcc_host\Release\clienthost_u_u.pdb

Sections

.text
Size: 440KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ