8277ba99acfff259d6596bafdf9cb3dc_JaffaCakes118 | Triage

Sharing

General

Target

8277ba99acfff259d6596bafdf9cb3dc_JaffaCakes118
Size

777KB
MD5

8277ba99acfff259d6596bafdf9cb3dc
SHA1

2cfdce50a50c8770be5d2778a58c0b435c874c7b
SHA256

622d4c981e2b36e33db9e323290998dab99c8463365dc01d4acd58067920324e
SHA512

a7743e5e650ef8aeacdcc2808c8a039a3548a8ad91db4e2831950548464640c27e06ef79b91a3d9ad19ede7c44556b554d77c17287d76f1a354a764c3c8d2138
SSDEEP

24576:4Gm5T+zNAHZ7R6GXnzJjUVR/udBPRe1aosdEY7Z+6HTXW:kKKHZ75JjUVRmdLo438OTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8277ba99acfff259d6596bafdf9cb3dc_JaffaCakes118

Files

8277ba99acfff259d6596bafdf9cb3dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\1_svn\Launcher\NyxLauncher\OutPut\Release\NyxLauncher\NyxLauncher.pdb

Sections

.text
Size: 668KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v-lizer
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE