bdd279369c582b2b7e40d8054fc5c9ff_JaffaCakes118 | Triage

Sharing

General

Target

bdd279369c582b2b7e40d8054fc5c9ff_JaffaCakes118
Size

261KB
MD5

bdd279369c582b2b7e40d8054fc5c9ff
SHA1

0808af95d2e5d07e4f64b11ed78ade07c98efc22
SHA256

c71a6da1b4435dcf981d739d456bc868636b96f7b49627393511133cbcca5116
SHA512

89623d544113d13655d168d4221d66a1de8efffee4fa163acebb9d7137d42dcf0a536c4cad14f82532831e3d0f4459e85498f228c5a4954fb2d1ead087343a80
SSDEEP

6144:++VhQ5FCifAUoxbM9T6R0zsSB0HGM4Dr9pzNmtOc:++Vu5kifvobM9oTSB0d4n9pBmd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdd279369c582b2b7e40d8054fc5c9ff_JaffaCakes118

Files

bdd279369c582b2b7e40d8054fc5c9ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

r:\Case\Projects\sly\AnyDVDhd\Loader\Release\Loader.pdb

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE