0883d839da0af761a7708c1b74fa9c07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0883d839da0af761a7708c1b74fa9c07_JaffaCakes118
Size

680KB
MD5

0883d839da0af761a7708c1b74fa9c07
SHA1

c8d2dfbf9deaff5898527a0ed750e7be7b303ac0
SHA256

1406a74fbb31d33f70deb6e9cc61955293aa96478c36b46a227df467be5c7052
SHA512

3e6faaec7705bdc53277098bc59c2bbda2bdf03b7b5573e98f34d2b74019c227a4b7d6ca13687f1e8fc9c40da62ec09687b669e54ba3181db60ce4a9fad4477e
SSDEEP

12288:usG5I6tL50DvJJJEnuJnQJY8VGRE42/J/zXJeBlOFd+:uxUDEuJQJYaGe42/xXol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0883d839da0af761a7708c1b74fa9c07_JaffaCakes118

Files

0883d839da0af761a7708c1b74fa9c07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\dev\cgames\Solitaire4\Release\Solitaire 4.pdb

Sections

.text
Size: 492KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.garr
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE