401650185f7ee8dd76d923e0c7fbab12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

401650185f7ee8dd76d923e0c7fbab12_JaffaCakes118
Size

376KB
MD5

401650185f7ee8dd76d923e0c7fbab12
SHA1

61488b526bcf36eac9433604a25913a4cabfda0c
SHA256

d3285b20245c6677ca83bf9684f3ca7e42fdd5a80180ee7e0fa47724276db99e
SHA512

88ece5193c1288e7df8c544e2f1e9a5eccd89aa39fa6209c7773d7fabb5709d7c40e3e85d24aba31c45199fd5caa082314fcb25b8cf8b3bb25891f305710b9c3
SSDEEP

6144:twMJwLnf/n2jWwM+0bjCHUIVDRdVRv4tQI/PDyyJrTOrXK62BadHva:y7nXgDobuHUqRBwiIHOKTOr66cs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
401650185f7ee8dd76d923e0c7fbab12_JaffaCakes118

Files

401650185f7ee8dd76d923e0c7fbab12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\fERNANDOZZ\Desktop\IF THE FIRST ONE DOESNT WORK CLICK THIS\minecraftisland.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 364KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ