bd926a7ae78a51798e549ce7c65b099d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd926a7ae78a51798e549ce7c65b099d_JaffaCakes118
Size

519KB
MD5

bd926a7ae78a51798e549ce7c65b099d
SHA1

7373298cc70fe05bb2e9006c048383c98d35f81b
SHA256

f2fd4e44ef1f8ac4ffc6d83bed51ceac607f6183a419db5e78c91d222cca3225
SHA512

4cb68bb06563de37f0ea29f2da08adbf3f209b402a5865c683c6c57095a04553e6913c1bf429978b7026b98f71d5b7cae3da97dafb8234e048d9d7e367e7aab4
SSDEEP

12288:f4/x7s70R2to0bceELWqfFyj0QpgU5ybIteKGM8J:f4/x7s70r02WqtyAMgjbIty9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd926a7ae78a51798e549ce7c65b099d_JaffaCakes118

Files

bd926a7ae78a51798e549ce7c65b099d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Program Files\Microsoft Visual Studio\MyProjects\Nick Skrepetos Projects\Super Ad Blocker Update\SuperAntiSpyware_Release\SSUpdate.pdb

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE