724dc5e67194b437389954f3aa5ed345_JaffaCakes118 | Triage

Sharing

General

Target

724dc5e67194b437389954f3aa5ed345_JaffaCakes118
Size

1.1MB
MD5

724dc5e67194b437389954f3aa5ed345
SHA1

c4d719e46c446a86c8cd5f2b652bca970ea366fa
SHA256

f58296619d8240a3b1a8b526fd6f7ec79feddf2d07eef1e864cc3c637db1946c
SHA512

5dc46412d993efe64adffeb5b9aceb451e0858ae3e1a2d6c6da0368ab2e1beb574becd55708ab8db0d29ce15473bbddb742b2b5ed854589f1593a15b3d0ab76f
SSDEEP

24576:fqJPiQxmF5ZIwhvnY24WiK3zAXtSPxELkO025IrmhJ47K8/+ZIoW/sqWkIZ7mTra:2OIwhv14K3kX+EJ025IrmhJ47K8/+ZIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
724dc5e67194b437389954f3aa5ed345_JaffaCakes118

Files

724dc5e67194b437389954f3aa5ed345_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\svn\APPS\GMGameStart\bin\release_static\GMUnPacker.pdb

Sections

.text
Size: 916KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ