038c9f7bb132e3ba630c0df8409919b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038c9f7bb132e3ba630c0df8409919b1_JaffaCakes118
Size

270KB
MD5

038c9f7bb132e3ba630c0df8409919b1
SHA1

178cc9e7c079f0e8a2ff84ce8540efca163098f8
SHA256

7cf818626d5e28540fd47c661b5433b2c2fbcd0ef44c7cd50f7d48bdfd2ed157
SHA512

6e05b8bd00383ac9b3d949138af4e2bb191dfbb4a31c3666c769b572812c001762709aa72e8d33b76169eab8a554f452b8dcb4ab4c412747f4fa46ec20ac7bfc
SSDEEP

6144:3xdfYYFA3aR1E94JVLRqlS6cHhCHfU2SHGN4AGEC:3wYA3anppqMdwH/N4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038c9f7bb132e3ba630c0df8409919b1_JaffaCakes118

Files

038c9f7bb132e3ba630c0df8409919b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Mysource\회사\Mhcomp\스텔스\SSubFile\SSubFile\Release\SSubFile.pdb

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE