3a307976b32d42fca0f6889f6e984b7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a307976b32d42fca0f6889f6e984b7b_JaffaCakes118
Size

6KB
MD5

3a307976b32d42fca0f6889f6e984b7b
SHA1

4ea07cff5f33b8a7ac21a452306d87061b585770
SHA256

da5df0eda9201a8e1e146ecd0c09683026570158cbdbff6491f0f690656a4c50
SHA512

c3580f31eb4ab62fa48e5c52b753cc22f532a6e4993efe77f6b06b0bf37175d612b61adddc20fa7c2acedcb4708f51a2832d5ab2ea0d73df68286876846c593c
SSDEEP

96:WSMXBf5a4rR5Ndr7g+l8W3ojWNta1FYcCeW:Vef5h3HY+aWRszYcCeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a307976b32d42fca0f6889f6e984b7b_JaffaCakes118

Files

3a307976b32d42fca0f6889f6e984b7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\Development\VSProjects\steam_api\FixPermissions\obj\Debug\FixPermissions.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ