fb8e8d132af281f5e5bb2340886c37e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8e8d132af281f5e5bb2340886c37e0_JaffaCakes118
Size

781KB
MD5

fb8e8d132af281f5e5bb2340886c37e0
SHA1

d8eef2947e3446dd755e5fc07de17e6fd9ef837e
SHA256

7d80fb04ed27557c419ec09d62206d22001eb6333ccadeb343bb369057fc3df3
SHA512

0568be604b130b8450aab507cb4f855f296d15785120e308bd8b5d78544787cf53f63351b4c0fc9bede7f3cdff20b8875eb54e742e7aa71fc9977ec1adc160a5
SSDEEP

24576:cCmogjR5Cc2hPoDvBclPlwnRK0k+Pz42tMGAF:FAZK2KcP02t6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8e8d132af281f5e5bb2340886c37e0_JaffaCakes118

Files

fb8e8d132af281f5e5bb2340886c37e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\p4os\client\Projects\GameUpdate\Development\EvilGameUpdate\EvilUpdateService\Samples\gu\Vc80\Release\gu.pdb

Sections

.text
Size: 460KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE