e2310796abe9f11e70057592d68296da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2310796abe9f11e70057592d68296da_JaffaCakes118
Size

338KB
MD5

e2310796abe9f11e70057592d68296da
SHA1

a6be42f85f435dbfcfb10fa74339eac9b94ce1ea
SHA256

4384e8b6a2d49aebb50a6c4e3330f0ccbaff915fe692e5dd68a5427da0d6eb84
SHA512

6fceefb07a5a8e7a19b4266d772d28b1fb260c4d9a06b5ef3f22c23b2b2b52eb40c8e52e5fe24eeb4d544c47f9e61932e38f452d2089b30fb203798bbea7be61
SSDEEP

6144:r4lRkAehaKuqTCF7bNje/uVZL7HZ3a+6TI67UTHf3D/ig2RFQ8lrB5kYabERprkU:rkWAehJuqTWVf7HI+h67UjvD/b2FQ8l9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2310796abe9f11e70057592d68296da_JaffaCakes118

Files

e2310796abe9f11e70057592d68296da_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE