95dc17754a94ddcbec2faeff34f5b65b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95dc17754a94ddcbec2faeff34f5b65b_JaffaCakes118
Size

837KB
MD5

95dc17754a94ddcbec2faeff34f5b65b
SHA1

571c71eecbfbd63a521756f7c5ca35178a010fb6
SHA256

9340a9ffc2f675ef60696d4cff1cc4ed0bfd704f91cc8268c12c880c0df276e0
SHA512

6155fa5693f77efdc7af482e85969ab714e27994aa5bf4c2e1e59bd828caf24b48d852a96fe693eb4a8c335c348d20067609f7dbf118b58676753baa537cdf9a
SSDEEP

6144:2Rp7mRpOZJpPZZqZpbZxRzjpPZnJZZRpbppH2pbBRpbpLHzjDRZRLJZZRpbppH04:p7Yh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95dc17754a94ddcbec2faeff34f5b65b_JaffaCakes118

Files

95dc17754a94ddcbec2faeff34f5b65b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Documents and Settings\Mathis\Mis documentos\Visual Studio 2008\Projects\Steam_CHaxer_v0l4\Steam_CHaxer_v0l4\obj\Release\Steamv0l4_base.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 803KB - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ