ad10deb488ff10a5ddfabf681dcb549d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad10deb488ff10a5ddfabf681dcb549d_JaffaCakes118
Size

63KB
MD5

ad10deb488ff10a5ddfabf681dcb549d
SHA1

ce74396306cf682f09bd185df5c8286e9750a80e
SHA256

00b9c09c8a99505ea96a24dffa9d7ac45dd15c3fad15c645118523670b4b1e78
SHA512

0af479faf5b44bddadb7bf94952aa6571878b0a4a5d4b227a216a6845ea2045402a06f8824c58d62b66193ea84f3dfe409875d7c7617a8172c40b7c536d159ca
SSDEEP

768:8MtN8xmlxQWAWvJ9gWIXa04Bo6gICKKuRhTgiDR6DUrM9eeooBwE:5XlxQhWB9gWIXa78KKIhTzsAA4oOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad10deb488ff10a5ddfabf681dcb549d_JaffaCakes118

Files

ad10deb488ff10a5ddfabf681dcb549d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dokumente und Einstellungen\Stefan\Eigene Dateien\Visual Studio 2008\Projects\GForce\GForce\obj\Debug\GForce.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ