03bca8f9aeab2580100b8c6cf540db77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03bca8f9aeab2580100b8c6cf540db77_JaffaCakes118
Size

673KB
MD5

03bca8f9aeab2580100b8c6cf540db77
SHA1

da09f07303170335fb54226f99c5b7cf8fbbd1e8
SHA256

da4f5f32890dd77b195da4067ca1b2eec9c1e4edaa92528b58c8c55f41f0556b
SHA512

5b96ea374ee91a2613271db87238fbf5fa5b30eee84202e94d70554343217e8d48f2e74db7f85d01435ca161922e8e86483d30352e92c00d6d7d8af537018deb
SSDEEP

12288:sW0HAQaPiInvRqlCL42Je9v4l43a2XhTbw0tHKiS8+9kvz:LnvRql68v4l43pXhTbw0tZ/vz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03bca8f9aeab2580100b8c6cf540db77_JaffaCakes118

Files

03bca8f9aeab2580100b8c6cf540db77_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Work\iMesh\iMesh7\G11_ASK\Client\RBin\UpdateInst.pdb

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE