72a6c56dd67c70dedb59db8dd7b86770_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72a6c56dd67c70dedb59db8dd7b86770_JaffaCakes118
Size

194KB
MD5

72a6c56dd67c70dedb59db8dd7b86770
SHA1

bc497d3668a4224ff81dfc3f4cde447e7140dd72
SHA256

4ce4138982717eeb6313e3b97c0709fee9f30fd28e2114b83e1206ffceda7396
SHA512

3acdd1f06bc8c5011a920bf91ef5ae5e3c8d0ff21ce0a988a8e503963c0e557ea4d16c8a67e4a0030fff5f746f188d6a9f7e4116ac0cc93b09775296f16883de
SSDEEP

3072:QO333333301pNczRv3rNfcyuprpa/FAytb+QetEr01pNczRv3rNf:QO3333333ysRv3rysusRv3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72a6c56dd67c70dedb59db8dd7b86770_JaffaCakes118

Files

72a6c56dd67c70dedb59db8dd7b86770_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\BluffyGoodGamer.JAKUB\Desktop\VB\MW3 ModBox V1.0\MW3 ModBox V1.0\obj\x86\Release\MW3 ModBox V1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ