4ba44bd093558e11ecf43b4e186e2fe4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ba44bd093558e11ecf43b4e186e2fe4_JaffaCakes118
Size

449KB
MD5

4ba44bd093558e11ecf43b4e186e2fe4
SHA1

a9925135bee3892aee46c9ab1cf26ea1927ae7f1
SHA256

031f8f308590dde78cdd524dc7e9ed6752f68f33668e2b0c7952ad717055dae2
SHA512

3d6d3c3c4f45f71f1c0c05831cf49dd587deb01afc3141cd1ba158e56b59cd63b234e6b6a3d49e5ac69e007844ed792c236f3c94078ec6bb36d2bbb455dcd062
SSDEEP

6144:2ZWv1ahaK9zGH7eIMhxHIftST4l/SGHFytywC442eDgCLRro+h2YYHz:LEAKU7HMTHz8HFy8wC12ZCnhYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ba44bd093558e11ecf43b4e186e2fe4_JaffaCakes118

Files

4ba44bd093558e11ecf43b4e186e2fe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\HelloWorld\obj\Debug\Steam.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ