a870b38364764290e34ddc464119a6ab_JaffaCakes118 | Triage

Sharing

General

Target

a870b38364764290e34ddc464119a6ab_JaffaCakes118
Size

80KB
MD5

a870b38364764290e34ddc464119a6ab
SHA1

4c2fff7bab943b9f099f7c776196c4064957e095
SHA256

0996b188c1874d1ce1ba132df75bd2f0e40f13fdc4ee1d131af3798ac2613c75
SHA512

0072920a644365c9d62476234ab98b0840cee950857d92e3b9e541d5a1a0475aa5e2537817725feb779c60ec31ef0c9efb0cb628b54b5290a0705f8fe76efe09
SSDEEP

1536:GF7ri1vJT9MSm4hjRCFXJqJKp86tsHLipqJBYlRvdsqdfjGG9:m7m1v19vhSq6QJSlFlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a870b38364764290e34ddc464119a6ab_JaffaCakes118

Files

a870b38364764290e34ddc464119a6ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\SpecTools\dual_core_optimizer\Dbuild0169\Release\sync_tsc.pdb

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE