0998a28ab6093dc88fa40cfae98fc80f_JaffaCakes118 | Triage

Sharing

General

Target

0998a28ab6093dc88fa40cfae98fc80f_JaffaCakes118
Size

88KB
MD5

0998a28ab6093dc88fa40cfae98fc80f
SHA1

ad407ac46517f642a0092ef278eae799856cdb8d
SHA256

d958bf60f92660020490a5ddac4c2051c4e5b699f58c8d5689465aabcd17b45e
SHA512

de29deb704ad8e7bed14c76ac8c105adb18c710ff6c17dde0cee9aa543fa04d1c2e51fc7c3338b375d41c51fc9d3583139407fafdf28f6c9e87d7e061ca74d49
SSDEEP

1536:RZLSxOJgy/rpnai6q1KJcj1PWTBFVWRT55YgcHYYY1Guye2:RNS06kaPOj1P2VWRT55YFHYYY1vye2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0998a28ab6093dc88fa40cfae98fc80f_JaffaCakes118

Files

0998a28ab6093dc88fa40cfae98fc80f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\我的文档\PE\NetGeter\Release\NetGeter.pdb

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Silvana
Size: 280B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE