b3187e734c53760650d76a64d512fa13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3187e734c53760650d76a64d512fa13_JaffaCakes118
Size

544KB
MD5

b3187e734c53760650d76a64d512fa13
SHA1

4febb84e837ca9c149b631be3813bd4a3b77f5a8
SHA256

f2c6b9496debee7ee7250b611ab69e1239dea1ccd558b23bcf41c3b9f9516b59
SHA512

f46a740263236e6f0437a52eff3955a7368ac7ef2d9a55a3eb7213eb92ed03aeceead70e10ad61f40093a7a925c5b973576b5be15b5fdfbb322bd9fed20d7a68
SSDEEP

6144:FaZuJtMarTC3MRAhy+AVYgLZJwGS3wUnLpSpYkL72ZbMY5x1RZU0H6OqOjZmYLM/:htM7mY+YsOdmYLML0qYn7Nwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3187e734c53760650d76a64d512fa13_JaffaCakes118

Files

b3187e734c53760650d76a64d512fa13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

rstrui.pdb

Exports

Exports

??0CCounter@@QAE@XZ
??1CCounter@@QAE@XZ
??4CCounter@@QAEAAV0@ABV0@@Z
?Down@CCounter@@QAEKXZ
?GetCount@CCounter@@QAEJXZ
?Init@CCounter@@QAEKXZ
?Up@CCounter@@QAEXXZ
?WaitForZero@CCounter@@QAEKXZ

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE