d3502aa495cb3f78239a62f2832c4991_JaffaCakes118 | Triage

Sharing

General

Target

d3502aa495cb3f78239a62f2832c4991_JaffaCakes118
Size

224KB
MD5

d3502aa495cb3f78239a62f2832c4991
SHA1

30046141d2a99ee7306ad7fd3e362d2a5aa674ad
SHA256

40d3df2d4218a3502b377d70eca776239d558abe21064a1c210fe81837903799
SHA512

67d84a89c0742996637e7bed3024688236a4409a921d58a02f83cf03a8445aad6cf25f384ab574ccb077088e1fc6ee805a1310ee583dcf27bb92f7e24cbf8be6
SSDEEP

6144:XBRd95RedIHTZuLym1GPfYpNj2+3FjLSUO:X3d/0IFuLafaNjo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3502aa495cb3f78239a62f2832c4991_JaffaCakes118

Files

d3502aa495cb3f78239a62f2832c4991_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dialer.pdb

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE