b873bd27accb6bc31fad1e174eec7e36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b873bd27accb6bc31fad1e174eec7e36_JaffaCakes118
Size

562KB
MD5

b873bd27accb6bc31fad1e174eec7e36
SHA1

4d4b52fab6a1b290a8ac465ac3f734116d68b953
SHA256

c7ad674b54f13369fc54568bee58f620443315193403566d7df4331caa2b8771
SHA512

c33a5748ceeaabf80001c2058ee71d2ff0ef234b72f739c6c04208d14e3f902c868647f451823b57d89c78042bae6951457011321b45d6f2ba41c47d775bf273
SSDEEP

12288:MpFb9jxG1pCWdFGqascbQycJDMzSs0E0DggB8LeU0OFnHEILEJ3cpjlsrNk0s1K:yFbBopCWdFRas+QycB5E0Seenk2wc/Md

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b873bd27accb6bc31fad1e174eec7e36_JaffaCakes118

Files

b873bd27accb6bc31fad1e174eec7e36_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\bld_area\InstallToolBox_r6.9\bin\BIN.IRU\MiniStub.pdb

Sections

.text
Size: 449KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ