b2417573181987e338aa7e6a2788dd91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2417573181987e338aa7e6a2788dd91_JaffaCakes118
Size

737KB
MD5

b2417573181987e338aa7e6a2788dd91
SHA1

e6b859e09e4b523531645b1e2a654ae7eff9e1a6
SHA256

de051934171f3e4d493caf1dbd34fc66b4c3dfb8d82f126eb296316667ee73e4
SHA512

f8f18959da81a38f464d8b03c33fc9dcd9261aec101d71ffbf621efc311d7e9a7a74560a0e7575b19b24c8ff7374937da7330abce23dd5df86e70afb9b4607ad
SSDEEP

12288:5dyCYVL715MXu5EMDK5aYNFDa1Y28kO9D5JzYfP0OqG1ZLfGGgLLGC6mCZjkOIVV:fF8D8p9D5JzXOqubgnhDijkOI1Hair

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2417573181987e338aa7e6a2788dd91_JaffaCakes118

Files

b2417573181987e338aa7e6a2788dd91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\DistributedAutoLink\Temp\CompileOutputDir\Updater.pdb

Sections

.text
Size: 444KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE