d9f887b261bf3f3637b8095ca7156e26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f887b261bf3f3637b8095ca7156e26_JaffaCakes118
Size

374KB
MD5

d9f887b261bf3f3637b8095ca7156e26
SHA1

7b9598a4c9b5bd2c8f87bb2e073197c34b88eb7b
SHA256

d77f948950982a03a93532fc9518af67c146a95edae59db21594f0436c478d34
SHA512

590a5fd67adfeb4b03ae60edf6b5a311da4ec398fd6d623634b8232e6c590ce2de050e10be78534971cf63d4652ff1cfcf24bc6a065eff2e0285441e416fca09
SSDEEP

6144:5NsQMS8S7VpVOvub5whFQKziOwv6FOEXiGu3e+2Wa9wukDo8VLSG4nt7Tm:r0H4KiIQ28YueFWewucoGktnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f887b261bf3f3637b8095ca7156e26_JaffaCakes118

Files

d9f887b261bf3f3637b8095ca7156e26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

t:\clview\x86\ship\0\clview.pdb

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE