6ee640720fab8875ea6a272d95628379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ee640720fab8875ea6a272d95628379_JaffaCakes118
Size

437KB
MD5

6ee640720fab8875ea6a272d95628379
SHA1

7f4c4271f7525f82e3f4ef0bdcd96090968c69e6
SHA256

bb184eb8c8c6731e981f6715e50edb35c5d87279f60bc460ed9d736c082be1ff
SHA512

93ad45d29d3aca04b282447e682b01ae85a163fe6f63154d209c7db132a5ca4aa9fb8a707e4b328bbca967bb501858fe4d1aa80f1f1136a48603e8552093c321
SSDEEP

12288:BE7niE2+W4MNV1B+FnyapifFqeJEi9y4Pio0hUH:OeL+/MNHB+FnyapneqOyQiAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ee640720fab8875ea6a272d95628379_JaffaCakes118

Files

6ee640720fab8875ea6a272d95628379_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dabdoub\Desktop\DZ--DZ\T@m mario S. 2012\obj\Debug\winrar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ