aa41ebf3f1e91f473dd46ea5972ac93d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa41ebf3f1e91f473dd46ea5972ac93d_JaffaCakes118
Size

737KB
MD5

aa41ebf3f1e91f473dd46ea5972ac93d
SHA1

f0079f701605fb3024a99c304caf0bb377aa36f4
SHA256

34a4b06dbc7a131c942f2190a16a5efdccab01b112c771b0c1f13e86b70957f7
SHA512

d0fc3b1e154f129e24f7218d0472e5239aec7c7e682dcff9f032b2de5255bb38f141752a87ae343948f464032394e255c1ba13ee73eb75bbb54b5b691ef6d094
SSDEEP

6144:3Ry1n+L9NjjELXJtjr88omNAfW1Ry1n+L9NjjELXJtjr88oma:3Ry1h1Ry1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa41ebf3f1e91f473dd46ea5972ac93d_JaffaCakes118

Files

aa41ebf3f1e91f473dd46ea5972ac93d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Trojaner\Documents\Visual Studio 2010\Projects\Minecraft\Minecraft\obj\x86\Release\Minecraft.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ