85a549892da387989a1a6e6f3b170361_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85a549892da387989a1a6e6f3b170361_JaffaCakes118
Size

269KB
MD5

85a549892da387989a1a6e6f3b170361
SHA1

0df8bdc2b9092593e5f1333419884531dccc0249
SHA256

d12e37126b24141e45b05990f771e91f7462e18bdbeabfa2b3dcfb0a482958cf
SHA512

8408d94bac89ee8c2726aeb8967c32052bc02db373c729a527b0bfe3bec592ecf32d9341b246465a0ee1afdcbe3b118bfc662a8116c2cf996860b065104bc793
SSDEEP

3072:jTRN4zClVjWBNGt9EsQZ0C61Yp+wh4QDgSfGBJhFeKhdUYB3RTFeK:XRNIAVjWj8Of6Fw+RPJhFeWdZFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85a549892da387989a1a6e6f3b170361_JaffaCakes118

Files

85a549892da387989a1a6e6f3b170361_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\pesho\Documents\Visual Studio 2008\Projects\WindowsApplication48\WindowsApplication48\obj\Debug\NFS World Boost Hack.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ