ad03ce0b0ea767bab5fdec08fc263481_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad03ce0b0ea767bab5fdec08fc263481_JaffaCakes118
Size

9KB
MD5

ad03ce0b0ea767bab5fdec08fc263481
SHA1

32c8c89aa7273e4b72779644eb69b7c810a1122d
SHA256

c9669bfa69433ced56069fdf88d5c23ee5130e9a3ed9a61dc50c77970bbc4b1b
SHA512

a024eb8e6bc3d60daf90cca11fcba515c5a1f90a2cbfa55ebed4458c87eaa66b999037c8c2957b2272ea58a4f816743571cff7cdea891fe079ba8e119f2f4d8d
SSDEEP

192:onE1WBhzRBBYQS7wR9mZ0FmA9dCGaRPfdqgMAlenfJKF9Bl3SWWNWRvCC:oE0xBqcR9mGxWRndq/AleE9j20v5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Waypoint Converter/TUGBot Waypoint Converter.exe

Files

ad03ce0b0ea767bab5fdec08fc263481_JaffaCakes118
.rar
Waypoint Converter/TUGBot Waypoint Converter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\DarkstaR\My Documents\Visual Studio 2008\Projects\TibiaUndergroundBot\TUGBot Waypoint Converter\obj\Release\TUGBot Waypoint Converter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Waypoint Converter/Waypoints/larvy center.TBWP
Waypoint Converter/Waypoints/turtle ph.TBWP