c05c510b87eb2c011874e8b7964ba2e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05c510b87eb2c011874e8b7964ba2e0_JaffaCakes118
Size

769KB
MD5

c05c510b87eb2c011874e8b7964ba2e0
SHA1

fa327fa4f2e5727e5573fe66c013e298d847ead2
SHA256

757f2cbe7bf6627aa5289006b631b4b83f8af956d759a0f4b6336805e69a4cd6
SHA512

0c3eb24227791c29b58a0c95170e39de41c3d3d7ede314ca6ec989af171e27d4204b44d070fe12ab567d80a4c60ff2df8394b9984d63e96c94523f84f2f3ff2b
SSDEEP

12288:JOBOWHgN+iJ8ZkNSe+qvw9f+o0KrjQ4Z81IeUoWew:gz6Se+qvwD0K/ZQ9Xw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05c510b87eb2c011874e8b7964ba2e0_JaffaCakes118

Files

c05c510b87eb2c011874e8b7964ba2e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\ravip\dev\work\yupdater\135_20080915_1958\Yahoo\yupdater\Release\yupdater.pdb

Sections

.text
Size: 428KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE