af32f1e157b35b8b70ddbfdeb3271a97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af32f1e157b35b8b70ddbfdeb3271a97_JaffaCakes118
Size

519KB
MD5

af32f1e157b35b8b70ddbfdeb3271a97
SHA1

383da5d87b6cf6f952aa90c497067b81a0c96340
SHA256

0d66463ff3c016f5a0e508d2d77b58d98502d29f1b630b41cd5649892a526fe7
SHA512

6c53265f7f8e2b96b6d2d07a2ed3d76c28cfc91a2b1df645399d12c2b7e7ee65a993154f87111a0acac5443e995b36fd8803ac87592a9efa9434f104e1bf5669
SSDEEP

6144:Aik28wHvOQLTZhBDsw0XwWwoqjLyATkBnRURuFsYC7sYwmICFyCXeSss:AikrMdLTtDd0Xwj7jWhBR85QmICFyjRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af32f1e157b35b8b70ddbfdeb3271a97_JaffaCakes118

Files

af32f1e157b35b8b70ddbfdeb3271a97_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\prj\deployment\201006_Release\rc\MOD\rcc_host\Release\clienthost_u_u.pdb

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ