214d899f4646a4cef1a873d77444d5a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

214d899f4646a4cef1a873d77444d5a6_JaffaCakes118
Size

432KB
MD5

214d899f4646a4cef1a873d77444d5a6
SHA1

48c36593548f7698a72d1aa03a3fff599101aeb9
SHA256

265a8381c8eebdbc88fe22f9b9d13cc3676516d15969105d3dfb7be6b9f8e405
SHA512

0d9aa5a018ce444006abd587252ef3c16c61192717a11b80a2e93bb2496a04291a940e0508a9ed63d84be9d43ac57974ae07add4ba9de3eb991266fa0ff488c3
SSDEEP

6144:ZvRPPJjhryTNsNdBxfY0KAtPufWZgyr17CjK1uoZPRxvq/6r:Z1WMdBxfNKAtfZgOlCjK1pZfq/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214d899f4646a4cef1a873d77444d5a6_JaffaCakes118

Files

214d899f4646a4cef1a873d77444d5a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Nitrus\Documents\Visual Studio 2013\Projects\rgg_roll\rgg_roll\obj\Debug\rgg_roll.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ