1b90d9552300aaa58f811e17af9bf828_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b90d9552300aaa58f811e17af9bf828_JaffaCakes118
Size

364KB
MD5

1b90d9552300aaa58f811e17af9bf828
SHA1

9651b3d53be787b5846a4f23bfb74a256edadc31
SHA256

a91bc8230b44d93332d7e9ff8a403b3343699a45179fac86f50cee7ce5926314
SHA512

fa3e26327fe9f884bcea4c940c228ce26cbad0e33c98d4b37e7211616dbbe52483f3e9450195063723c13a6cf125d80d4cb324eae2c93ad158125010843c4dcb
SSDEEP

6144:G3zofy1aPZvo5T6oLskdvZ2SetXLNDOkocbzdlBZ0xoxsnYlzU3p3njUddoZIEDu:eD1qRoZ6eskv2xvakocTaKUZ3njad+IL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nighty.is.in.hacked.scene.rush.SVCD.GERMAN-PRD.exe

Files

1b90d9552300aaa58f811e17af9bf828_JaffaCakes118
.zip
Nighty.is.in.hacked.scene.rush.SVCD.GERMAN-PRD.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Chef\Desktop\CYBERSUBI und Will\subi1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ