b24b35797b9e7890cd16f03e78711668_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b24b35797b9e7890cd16f03e78711668_JaffaCakes118
Size

92KB
MD5

b24b35797b9e7890cd16f03e78711668
SHA1

5e2e1aece9e63b8d9429d4642c765b238cf4680c
SHA256

25130efd075e9dce69d54cab2b3c40d681f6fcfddd0c14e7ddc164cf92192e18
SHA512

f01cbece78df9861930adf9f6280596faa006e3bc207651732ca04984900bdc344146d9d11471349a6dbec8c002788cc043d67650683aaa308f6ba63d3a52d2c
SSDEEP

1536:wGDUchfXbZ0aeb90jaC12E4LHkYfTLbELpRKgm1/gV5sUjbR:kchfXbup04LnomgmlgV5sUjbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b24b35797b9e7890cd16f03e78711668_JaffaCakes118

Files

b24b35797b9e7890cd16f03e78711668_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\jobs\AskStub\workspace\AskStub\Release\APNStub.pdb

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ