b5ab208cb03bb11e16d608c2ce1f41ff_JaffaCakes118 | Triage

Sharing

General

Target

b5ab208cb03bb11e16d608c2ce1f41ff_JaffaCakes118
Size

297KB
MD5

b5ab208cb03bb11e16d608c2ce1f41ff
SHA1

7707cf1def52da120a05020f6c14cba0a5981ff4
SHA256

36abba17d3cedc48d388250d40586aba47901137df0b721f9f6d473a3c84fa6a
SHA512

186c7c00a5401bb9cde2c188c4a047f0aacbcb3bd7ba61d729a39cb7d541f133c8628bf48897c9d0f05af4a4886c62804a8b7490e3859519101200b4bc7917f4
SSDEEP

6144:+eeHijIbOV6luJiztd5pmE0E+CmkVuq0qltMX5c66vPm:+eGijIEizbl0JRkX0ql+E2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5ab208cb03bb11e16d608c2ce1f41ff_JaffaCakes118

Files

b5ab208cb03bb11e16d608c2ce1f41ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-2.0-w32-bld\build\obj-firefox\toolkit\crashreporter\client\crashreporter.pdb

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xur
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE