0f99d01f3b347f41b9a1190b4907b4a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f99d01f3b347f41b9a1190b4907b4a1_JaffaCakes118
Size

649KB
MD5

0f99d01f3b347f41b9a1190b4907b4a1
SHA1

efd81ab74a4d70f591fb3f50dfdd606bad378985
SHA256

05fcd9e7572487c877d3786b4ca7a65a39e6a68e6e16d90b115c026b02c1020f
SHA512

3b0af10400e03a980380817a68ede92ca2ac1741ae38b4db8ac95041521bf4a855375690f66ad9fbd09050d9cfd241d7375f6dedf82de917adb81a302b89c916
SSDEEP

12288:AmeYOdWFAuTuJ12lgrrRSHN6TY1RlDALU9:ctdWpTM1igrrR1Y13Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f99d01f3b347f41b9a1190b4907b4a1_JaffaCakes118

Files

0f99d01f3b347f41b9a1190b4907b4a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Benjamin\Desktop\Creation Kurtix Crypter Dark Edition\Bombe\obj\Debug\HabboZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 437KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ