631c21c91cca39c01b0f160ff67e417c_JaffaCakes118 | Triage

Sharing

General

Target

631c21c91cca39c01b0f160ff67e417c_JaffaCakes118
Size

775KB
MD5

631c21c91cca39c01b0f160ff67e417c
SHA1

49cf9e237e1ecae52de98720a557a2ce0b00926f
SHA256

9df5c5a8002047990d542a9cae53ebd7d6b20941a0a46e738edb836efce80914
SHA512

0b95d4a4ec95c6d8f94302a2be00c830afbe893927934ebb63799626d6975f4b7d682f238951981d6635fb39f3b54d1d689437c37f1311354a444f07c10b1efd
SSDEEP

24576:PEiibXGzSUt36xdtHWiryv3XrDfjAdDp6WjBG:PE7b2zSUt3+a0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
631c21c91cca39c01b0f160ff67e417c_JaffaCakes118

Files

631c21c91cca39c01b0f160ff67e417c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Workfolder_111Q_Bushido\4.DevelopLibrary\Toronto\03.SourceCode(COD)\111QSource\Source\PlayUI\obj\Release\PlayUI.pdb

Sections

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ