3e297174025e7933db1359b4c21fc8a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e297174025e7933db1359b4c21fc8a0_JaffaCakes118
Size

456KB
MD5

3e297174025e7933db1359b4c21fc8a0
SHA1

52abf35983240cc77a80e42d72070f8fc37dd96c
SHA256

c5192011a734091fb81740b23c1afde68657303d3a3fd208ab58ca5c0e28cff4
SHA512

34282addad977b77f5d62492101959526c384f7f87b400772677bb8e508f9c8e49e5ae60b194b1ac9fe67af66fe66d98ea7065ee7fe4772030c65260c71299ef
SSDEEP

6144:/J1iLVV0Wr3T7bJJ1iLXMZakdUpRUC4MQIsEAJ1iL:/LIHdUpCC4MQcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e297174025e7933db1359b4c21fc8a0_JaffaCakes118

Files

3e297174025e7933db1359b4c21fc8a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Anwender\Desktop\VB Projekte\PES 2011 BaL Editor\BaL\BaL\obj\x86\Debug\BaL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ