a3637fdaacc355652455f59de9093f0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3637fdaacc355652455f59de9093f0e_JaffaCakes118
Size

377KB
MD5

a3637fdaacc355652455f59de9093f0e
SHA1

019e2d0e1a0b7db5b531c8abb0d8a1754f81a6cf
SHA256

8d53b8d314784b87a7e4e915636384e85ac10dec3348afe0636ae2033a2577e1
SHA512

633fc44839334a577922dd44e6ba085eda697a9ae3f093bd64d9fa1955e8dffa1b4ffccc85c824178164846dab7700c6703fabcbac75c5ecca7f651fb87807a1
SSDEEP

6144:Im2UEB2UJ+xUb7IOH4wt7eqBvm9oHcpY5xOX+Bw6qfWiBhJOtI7LPzM34G5w:MU228lAA4wt7ev99K5M+cfPBhJ/77PGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3637fdaacc355652455f59de9093f0e_JaffaCakes118

Files

a3637fdaacc355652455f59de9093f0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

s:\ytb\toolbar\clientie\v8\trunk\ytie\ytbbroker\release\ytbb.pdb

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE