446198ffc3a92612d2c0d8357ec3ffca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446198ffc3a92612d2c0d8357ec3ffca_JaffaCakes118
Size

257KB
MD5

446198ffc3a92612d2c0d8357ec3ffca
SHA1

9db848ba365ba7845519ff5ae7a53891db7c7045
SHA256

dd3655db1a9094bb2090811524b0980c889cfd1ea5c51ed1a0a4f18f0185743b
SHA512

f0a6c28831bdfb2120eb26e481c806467fa689c1cf0f99ba6e5f14adb93dd629c18ba8598b50d7af14d6aa5e15ab6e4c4b9967745a534ee5723060a416d170de
SSDEEP

6144:8BmzxWkLGz0dB5nFmnlR6dxw+YSgRKVs9IrL8:8qWkKwdHw6dxnYnI/8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446198ffc3a92612d2c0d8357ec3ffca_JaffaCakes118

Files

446198ffc3a92612d2c0d8357ec3ffca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\cm\build\public\eSupport_WinHelp_Tool\e_support\source_code\AFLookup\Release\AFLookup.pdb

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE