229d14f40cec25eca15847ceaa59c8f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

229d14f40cec25eca15847ceaa59c8f5_JaffaCakes118
Size

549KB
MD5

229d14f40cec25eca15847ceaa59c8f5
SHA1

9cdd3744f32d85c21de6d47adb2c3946c946e318
SHA256

2756b43bb5afcf8f2677f4ae1b79ba771f32bc4932c35f6f1c170f249421f1e0
SHA512

b291325e9a083d35cb845304d09527733f8a0fddcd5001a201ee80851fb7b9c41fa1c94823e9b67224bb4d20f094e022c075dc79ea20dfddd32354da9bf1bc4a
SSDEEP

12288:4NYFk83rQiGGSe09HpmJYT4OqDoEc4ncKBBFZRPhWL4smUxT:lFF3rQiGGSe09Hpm1OqRcJKrF/PhWssh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
229d14f40cec25eca15847ceaa59c8f5_JaffaCakes118

Files

229d14f40cec25eca15847ceaa59c8f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dabdoub\Desktop\DZ--DZ\T@m mario S. 2012\obj\Debug\winrar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 532KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ