3de72f7a05a97a050a448556245bcada_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de72f7a05a97a050a448556245bcada_JaffaCakes118
Size

1.7MB
MD5

3de72f7a05a97a050a448556245bcada
SHA1

e946418787a96538cedb5e370fac860ae9f3caa7
SHA256

d7f33a9ee7062a7497c9e50a30deb3f3b4863b94caf10ac8e27259562e112f65
SHA512

ddc4928bfb533e3bb91cfb542ff3c8846af82d39e02ba08fef9d59784f7ca61e6955c97fcce81d9090b2f97182f85fdbc86ab40ebcc5bc0d13fddebc27913807
SSDEEP

49152:AsNRQ6Lr9gWezJvQt9esrtH44L1EISdDdDleWWX:AKQ6Lr92Qt9TtHLLXSdpDlO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de72f7a05a97a050a448556245bcada_JaffaCakes118

Files

3de72f7a05a97a050a448556245bcada_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Maximus\Documents\Visual Studio 2008\Projects\rename it\rename it\obj\Release\Eset All Versions KeyGen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ