2a815b85d1e01718bc19a3dbd245a478_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a815b85d1e01718bc19a3dbd245a478_JaffaCakes118
Size

196KB
MD5

2a815b85d1e01718bc19a3dbd245a478
SHA1

11761599e7f03af59168e416f18cd88c9071c561
SHA256

e2a473ebac038d2b5095334875fc731e7fa72eb7e86cd98bcd8967161139f0ad
SHA512

fe90f731645403cf9b656166535b2cc17cdaad04f77afe7ada6695c274e8b7470171afa3c073e47bd283a749c71a066c78726424da4b466d1b99a0733c6d9a4c
SSDEEP

3072:zwLJ2ry6HbpCCyqgXpfXcrBWQt3vU1/+zMQzGZTCFGLAaRAK4YdPx9QXtqiiIaa:zo2+6cpqkFsrBfvzmCFwmK4IPctqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a815b85d1e01718bc19a3dbd245a478_JaffaCakes118

Files

2a815b85d1e01718bc19a3dbd245a478_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cygwin\home\buildmeister\makerelease\stable\Build\Source\IMVUQualityAgent\Release\IMVUQualityAgent.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE