a59e0d9bdf1e04d1925d2637f621a425_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59e0d9bdf1e04d1925d2637f621a425_JaffaCakes118
Size

15.6MB
MD5

a59e0d9bdf1e04d1925d2637f621a425
SHA1

2e89af2c15647f6c0607c5401cf7cc69a14f7f91
SHA256

398e384e210d72c917d87e9fb8928333750c509dae417fbb8f3bb02a3404abb2
SHA512

130f5e5d3351424ae5b1db4d155f78b9b3a987a4aeb06d2cdff47bc78cd9440f1f7124792095b16c494982521558e4ecca1cbbb64981da4c85676cb05e5e57cd
SSDEEP

196608:tr4/LD/htV119V6wFKI+Jz4+W1f2XDfdI7JKqMbkICB4Ms9Vw4s/cqC8MRL/vh:F4/FDp+Jz4d2BI1ckhs9M/cqCDRLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59e0d9bdf1e04d1925d2637f621a425_JaffaCakes118

Files

a59e0d9bdf1e04d1925d2637f621a425_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\BranchAI\win\Release\stubs\x86u\ExternalUi.pdb

Sections

.text
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE