02a66fd993f371ac8c8d11b8c8e7fbd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a66fd993f371ac8c8d11b8c8e7fbd7_JaffaCakes118
Size

140KB
MD5

02a66fd993f371ac8c8d11b8c8e7fbd7
SHA1

bc5846cf8152f5912dd12dde2f5f154a14903994
SHA256

9618b141f745cfd658460cb646301370677e18f70a54e1d58252ef7d4484e63a
SHA512

2b7b92d4273524008620a432262bab29aeb21781cb5902ea1afd66a2af0b77e6dba9d65c63fd206e510c73b91d8d48f91ce8b11f289b3c44be3f98c88fe8bb91
SSDEEP

3072:HAfU4O6a/Vm3sdwJqGH+dLJY4fEDEwkol/KI/Sg//:t4O62aJRSYyolrSE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a66fd993f371ac8c8d11b8c8e7fbd7_JaffaCakes118

Files

02a66fd993f371ac8c8d11b8c8e7fbd7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Hudsonhome\jobs\PJT_C_Line_desktop_Release\workspace\pdb\LineAppMgr.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ