398e21dbdb86bf231392d2c13bc9c45c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

398e21dbdb86bf231392d2c13bc9c45c_JaffaCakes118
Size

480KB
MD5

398e21dbdb86bf231392d2c13bc9c45c
SHA1

61e6ff0ff6dda8b5d6321bb81c8ca09d4fc4e81b
SHA256

14f6f3167bdce42f5294828645fbeda6636f6e71c19a94507c321c6471d49750
SHA512

f503f216c3b5debd22188ad2e4cc86ab31da4fba93b289585a548941a8c8ba23defb9673b89455c916caae4376380771a586bb4b08abda24222aad68049c9f65
SSDEEP

12288:kd/OwQXFDv1aOzlvt5bxRC1airBcnxTKDd0uP:0/9Qhv9zRre3YRK2A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
398e21dbdb86bf231392d2c13bc9c45c_JaffaCakes118

Files

398e21dbdb86bf231392d2c13bc9c45c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\wIcKeD\Desktop\SteamUnbanner v2.1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ