96c3f9c80af5b5c868e2252fb9734d2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96c3f9c80af5b5c868e2252fb9734d2b_JaffaCakes118
Size

225KB
MD5

96c3f9c80af5b5c868e2252fb9734d2b
SHA1

8f733a3939bd66508d353be02cf66618f59ba09f
SHA256

8c2e3425b3671bcaedbf96d698215326e9199dc9c09ec7876fa0376b0aae8b87
SHA512

0f0ba8a6d9becd88cf1fd91699ba848d5de2a3e9eba4d4497979ac6508f243566183d115026f71e503a2837d52f21fe24faef46b9f1ef6d6fb9c5bed4118f28f
SSDEEP

6144:RH8U95EB1T34WsSh5MZ5WGcQ/uE92k8gF12JKIiyI:Z8U9SB1T35sUY5mWuEz67DI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c3f9c80af5b5c868e2252fb9734d2b_JaffaCakes118

Files

96c3f9c80af5b5c868e2252fb9734d2b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_apanz\Main\code\build\win\results\Release\info\airappinstaller.pdb

Sections

.text
Size: 512B - Virtual size: 441B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE