4dc4671b0871be80d4f215cec428b313_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dc4671b0871be80d4f215cec428b313_JaffaCakes118
Size

340KB
MD5

4dc4671b0871be80d4f215cec428b313
SHA1

22ee910e81f3ae797006fd2fd088df6b68ae80c6
SHA256

52fa87a78357f43dd1a5d5f82c4055a007557dc32f63885e5cdd570e885121c3
SHA512

9e83f4b3179971f57a3a2fba69be9e810ae8b20d7a57bad507f77a6d3586504314695708d4fed80871cc4394ecdf5092cf9e677d6f109e2c50ff2c47892a5864
SSDEEP

3072:NILNDjX+SYq77vM2Nb9KW08iaRRWTBuyP+aYM9xOHMtjHFNETkXAEDqE/w0jDM4R:G9MOwW08i6M9FjHDb+0vir14uQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc4671b0871be80d4f215cec428b313_JaffaCakes118

Files

4dc4671b0871be80d4f215cec428b313_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\gbhm\GBHGame\GBHGame\obj\x86\Debug\GBHGame.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ