cf4a683fb7f5df53834c5440654bb034_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf4a683fb7f5df53834c5440654bb034_JaffaCakes118
Size

257KB
MD5

cf4a683fb7f5df53834c5440654bb034
SHA1

3c668f09a696e371b7648008d8b12bd098455fd0
SHA256

9a61f4ab77352530f794e1a194dfccd1012606a837d6888f1350ce9fbca94165
SHA512

e1bdc4d7a171bb19d9153b128ab6b962774ca29d367e7c18fca7544f8a8907452b09cdd32c407d9325918822180a1f865614ac0ccb562b9fc30b139d5f45842a
SSDEEP

3072:Hm6al13TDxBtXm99mFT+bnfP4hRsK6jJHzMpoPszCXBGCaFceUKxh1KjrEuWgZKL:Hm6aZ09mgPqz41eDicBbj8ENp5Pu2r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf4a683fb7f5df53834c5440654bb034_JaffaCakes118

Files

cf4a683fb7f5df53834c5440654bb034_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Works&Projects\MagicJack_1_20\SJphone\Customers\Common\NSIS\Source\MJSetupHelpers\Release\MJSetupHelpers.pdb

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE