5ad2e63e67a01453456775736cfa103e_JaffaCakes118 | Triage

Sharing

General

Target

5ad2e63e67a01453456775736cfa103e_JaffaCakes118
Size

2.8MB
MD5

5ad2e63e67a01453456775736cfa103e
SHA1

ad93d28bc782c4692e097556edc724afdd745189
SHA256

91d02c64d50ccfec6e524bfd1aed912fd98de32af9433e39c85c37e8a8916f80
SHA512

be12d90b6dda70b7b35ccd85ed94d29c87e9257554fbd03ed1eef02f42eedcc83ab91e351f99eadf5f98d32a42b1f8b03378d8da9d42b2b3c531aa7b9c6d4b4b
SSDEEP

49152:0muqkYazWr974blZ/GPKQ0JMrBi1v7nkSLB8CdnH9LQZw9r5/hEa3Z3Td0AUhDvZ:Plx9MlZOPl0C1GO4HSw9r5K2DJUuhV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Activador Office 2010 Toolkit 2.0 Beta 4/Office 2010 Toolkit.exe

Files

5ad2e63e67a01453456775736cfa103e_JaffaCakes118
.rar
Activador Office 2010 Toolkit 2.0 Beta 4/Office 2010 Toolkit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\My Data\My Source Code\Microsoft Office 2010\Office 2010 Toolkit\Office 2010 Toolkit\obj\x86\Release\Office 2010 Toolkit.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.8MB - Virtual size: 14.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Activador Office 2010 Toolkit 2.0 Beta 4/Settings.ini
Activador Office 2010 Toolkit 2.0 Beta 4/informacion.txt