e1ff4b214e313e2a5f1a02ce0fac6d03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1ff4b214e313e2a5f1a02ce0fac6d03_JaffaCakes118
Size

500KB
MD5

e1ff4b214e313e2a5f1a02ce0fac6d03
SHA1

885f3a78c0cb5ab30535a162ec865bf36d18617d
SHA256

2ac0c8a7c1ce2f74f6df6e931b4d2f7ae2c49f30ac3a5f206171b7f2e54fb748
SHA512

b1e96340f52c2aa11bf9b0b92daf0dd0e62f1ae97fa2a25a699d240653fae216c30bcbe9fc0251b998a06e900647179adf00d3b9af88a2f2bd4c72062f95df6b
SSDEEP

12288:Vk2VcAsFlcBp5wMDsJj4FA3yfnO/aMSHKPfxw9jV:eEdgg5wEF2y/phYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ff4b214e313e2a5f1a02ce0fac6d03_JaffaCakes118

Files

e1ff4b214e313e2a5f1a02ce0fac6d03_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\sputnik_branches\sputnik.mail.ru_2_4\_out\Win32\Release\SputnikHelper.pdb

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE