b9ed62976d0feceedcadf3091e70b62c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ed62976d0feceedcadf3091e70b62c_JaffaCakes118
Size

183KB
MD5

b9ed62976d0feceedcadf3091e70b62c
SHA1

e2d1ae73b732b7e2ccf9e07fbbb1d7429d169525
SHA256

206e3a0f47b1c00285c58b3a13a4199494fe929f9efaec5739b322cfbe925dca
SHA512

f7c14c3d7098d8c34b9eb1542bca4c68a3fcaa361fee073cc766a46225170da6409b9d36f6b62d13d209e6b321d54e8034436a54a0550eac49e28b03b7238609
SSDEEP

3072:O6cHfLicnNqQO7P2l09nVpjjUV1K4E3qSGXZJTJlafA8rORmyGacIX+5Q:LyucnNqDiuViVw4WqBrKimNacy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ed62976d0feceedcadf3091e70b62c_JaffaCakes118

Files

b9ed62976d0feceedcadf3091e70b62c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\build\3.3.0\src.pro\OOO330_m20\desktop\wntmsci12.pro\bin\rebaseoo.pdb

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE