f6ed354f6c75beaf4adcef6168dbce73_JaffaCakes118 | Triage

Sharing

General

Target

f6ed354f6c75beaf4adcef6168dbce73_JaffaCakes118
Size

225KB
MD5

f6ed354f6c75beaf4adcef6168dbce73
SHA1

5735849dcb5a005c9f36004aa1764e746a807852
SHA256

117ec1ed50c651b5da490dbe5f719fb78c2d22875bc1fe28a824d18a4b99456d
SHA512

059bde19b55164f54c566af763e0603d4a95cc1162c86c75e940755b1e1f02ba7de7bbc6beb988e207cf9e531dc3564ca781f1b17b8600891c4eda7864b54483
SSDEEP

6144:fH8U95EB9jsf5uspPKvGEU6YrB71z8kxYIbr1na:P8U9SB9jquspy+16YDIkxXrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6ed354f6c75beaf4adcef6168dbce73_JaffaCakes118

Files

f6ed354f6c75beaf4adcef6168dbce73_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_apz\Main\code\build\win\results\Release\info\airappinstaller.pdb

Sections

.text
Size: 512B - Virtual size: 441B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE