3b95f4f244c356a4fad2757ec2035aca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b95f4f244c356a4fad2757ec2035aca_JaffaCakes118
Size

330KB
MD5

3b95f4f244c356a4fad2757ec2035aca
SHA1

fd6dfd270c26fd76b56b5dc2283097e02ce4ac57
SHA256

22ad65d7d9fa36857f63a9a4789d4ede128c9c69eacd21c3b9aec56fbeb4776f
SHA512

130a7176932c5b278ff666fbff38f53dc5bededd139300153b366a4856173580ded2b194dcbb951410a9c05cd2ad7378735d9f08a0a9f3f271cdceb1434bc9f1
SSDEEP

6144:rU/blypQMpopQw5urAslwz0w7IZtsOQGoeNJfxC6XKMKwzZjUTtIO9GhrP0:rUDwpTpoburAF0wkZSeNJfxC6aMvzZQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b95f4f244c356a4fad2757ec2035aca_JaffaCakes118

Files

3b95f4f244c356a4fad2757ec2035aca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\DUOWAN_BUILD\build\Build_Src\yygame\yygame_1.5.4_beta_20121128\bin\dbginfo\yygcenter.pdb

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE