b53e44f9b90df0cb85a41456be5f4b2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b53e44f9b90df0cb85a41456be5f4b2c_JaffaCakes118
Size

271KB
MD5

b53e44f9b90df0cb85a41456be5f4b2c
SHA1

b1eb124cfa701c662240796c08bcab2c51fe529a
SHA256

d54b5f17c6c7334e03095392b5b2efbc561268841045f4b1bf4754a8d79ce5ec
SHA512

b20eda5617f88b16cac577b2dadb0643e8a611638922a99cf6a6fa4b447864edb3296626f0dcd0d319f343fec149be6926e22a6d1fc269b47bd8d11712d33607
SSDEEP

6144:NRHFDnKkM3NTv8fBgr4lJtCCUnE7AFPOY:7lDnKF9UfWkJjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b53e44f9b90df0cb85a41456be5f4b2c_JaffaCakes118

Files

b53e44f9b90df0cb85a41456be5f4b2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Mysource\회사\Mhcomp\기본스텔스\DLauncher\DLauncher\Release\DLauncher.pdb

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE