251ff20ba637766bd34420d9b634ab5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

251ff20ba637766bd34420d9b634ab5e_JaffaCakes118
Size

2.1MB
MD5

251ff20ba637766bd34420d9b634ab5e
SHA1

03d664ecb5a62497c1dfac0a886dff4fd91d2acf
SHA256

944377c12bb518200619c53d00d701a846d6c203db8f76e8d1ccf874b4067fea
SHA512

570dc518065fda80f74295ac294eb312d4f5c246ad92c7a0ed3266ad9419220bc676ded6c5d7952d962240dd054d949ecc7e6cfa8cdc150da76cb646caa5afdf
SSDEEP

24576:iAFITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQiSH5REzwD813MzCg:iCwrkVLbL1frdCYR7SbHug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
251ff20ba637766bd34420d9b634ab5e_JaffaCakes118

Files

251ff20ba637766bd34420d9b634ab5e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Project\工作工具制作\StartGame\Debug\StartGame.pdb

Sections

.textbss
Size: - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ