2ee78be1c3cd3ad50f640b0aec71fd9e_JaffaCakes118 | Triage

Sharing

General

Target

2ee78be1c3cd3ad50f640b0aec71fd9e_JaffaCakes118
Size

1.1MB
MD5

2ee78be1c3cd3ad50f640b0aec71fd9e
SHA1

a0169441df0f6594e150534969aad65f0cab0953
SHA256

ff211ed3146cef4b0b1689486be10933ce63b28b5593c762305f3da116b5ceb9
SHA512

6ea0f6ccae08fa3d0ea1b30e71038d73db92e12cf19cf1c2917b6b5269482cc493231f3ccdbae80a846e6b7c5c17bca96d57944a6c248c037ff600df36b14f50
SSDEEP

3072:FlVXpL2+/lE8AIagP28VVkz8jWuxtPevHmTAr/gyuibHEKB2hy:hXpK+/lJfP28VVk6bPcmTsgNibHE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ee78be1c3cd3ad50f640b0aec71fd9e_JaffaCakes118

Files

2ee78be1c3cd3ad50f640b0aec71fd9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\Plocha\Call of duty ModernWarFare3 level hack V2.3\Call of duty ModernWarFare3 level hack V2.3\obj\Debug\Call of duty ModernWarFare3 level hack V2.3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ