ab47be95e10ac9a8fa9375cb6b943faa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab47be95e10ac9a8fa9375cb6b943faa_JaffaCakes118
Size

363KB
MD5

ab47be95e10ac9a8fa9375cb6b943faa
SHA1

d7fe7707d948fec20739310687f2cbb8bb7e72fb
SHA256

f7114b831e1fcf67ef9cf16d7aa789c3038babce3263f2615271be9f2af4e9a4
SHA512

ac081566d271274bc4e8db299686f29a7dd1da1bf3ed4a342ab0c3fd757bfc51eb995f9faa3103cd804512d0b76c66ed44001144ab6bb63dac93306861776433
SSDEEP

6144:bvlZE7bqK81dwHzr8q5RCVid65kzLowm5jwZAQIClYX025bKg9tva3gA8y:TlZE7bq5wH/h5RC6iQNIClYX025bK+tm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab47be95e10ac9a8fa9375cb6b943faa_JaffaCakes118

Files

ab47be95e10ac9a8fa9375cb6b943faa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dabdoub\Desktop\DZ--DZ\T@m mario S. 2012\obj\Debug\winrar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ