a01df2c27708ce2c3d6a0a9d41013a20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a01df2c27708ce2c3d6a0a9d41013a20_JaffaCakes118
Size

711KB
MD5

a01df2c27708ce2c3d6a0a9d41013a20
SHA1

c29dda3733de20f274195c73024f89ed333f402a
SHA256

278abfb2a74e876f380cc81e0087e0bdf8f3f6a371623eb98707c5bf7d37d6a6
SHA512

56b223b7aae7e76b41e4dd305f468a05a4056778ceb678a82ed8c716aff72b9f637cf30c59d188e1e7a9997f268093a14c65ea62876a3361a2a6f7ecf2009c58
SSDEEP

12288:OnqSD0jt72CfHJi3q91KGOGwsKpaX092Uzuh:OAjZ2iJKvGOGMpTRzuh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01df2c27708ce2c3d6a0a9d41013a20_JaffaCakes118

Files

a01df2c27708ce2c3d6a0a9d41013a20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\bld_area\savcorp10.2\Norton_System_Center\src\extras\GRCCreator\Release\ConfigEd.pdb

Sections

.text
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE