3e23581e8602f45f642d060d54dd43bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e23581e8602f45f642d060d54dd43bc_JaffaCakes118
Size

528KB
MD5

3e23581e8602f45f642d060d54dd43bc
SHA1

1de55f3b13100b27603fa90f43da54c232b26dc2
SHA256

29f672ceeae2a083372d060ff631ff4323a781b490318b567c6d6f504b20b99a
SHA512

6e8a14ca088d55a74ea2f6fefc221d9decb5a5e87182e35d73cff5c1087d62fa017e721f051aae232a60abf0a00ddcf9486c5c341b885d244b2eda0210a52a73
SSDEEP

12288:CdEtJjS4LEgLTAb+C+6dfxTvy//KXzLHJVqIP40WqUoOii2Ox:iEtJjtLEgLTv56dfRvy6XzLHT9P4TloY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e23581e8602f45f642d060d54dd43bc_JaffaCakes118

Files

3e23581e8602f45f642d060d54dd43bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dabdoub\Desktop\DZ--DZ\T@m mario S. 2012\obj\Debug\winrar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 511KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ