234296734a594236ac4ff30b71b35b8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

234296734a594236ac4ff30b71b35b8d_JaffaCakes118
Size

824KB
MD5

234296734a594236ac4ff30b71b35b8d
SHA1

1fd5018c15ad05f463a0652f7991b51fdc6873a1
SHA256

39659aea68ca07d5842a8f9320ad2e0414c372b292fa6785b72024e745905152
SHA512

a06b4452f1bf212596ce5fd6c5ffecfa461b97bdd400f9d3a033e74dd732ecada6a5b445141cbce07bf0e9189a06f47d5d8948c51d3098139c928b77a8b67ac5
SSDEEP

24576:aaeHwxhHvg8wvpnaR0gxC3W9Kz2eNtAyxT0mnU:aaeHwx1EZIdQk0A87

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
234296734a594236ac4ff30b71b35b8d_JaffaCakes118

Files

234296734a594236ac4ff30b71b35b8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\VPN_game\VpnGame\newbild310817Stable(WFEditionTR)\VPNGameClient3\cyber_vpn\obj\x86\Release\VPNGameWF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 802KB - Virtual size: 802KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ