cec830789a606549baea80f2de9b721b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cec830789a606549baea80f2de9b721b_JaffaCakes118
Size

677KB
MD5

cec830789a606549baea80f2de9b721b
SHA1

f5b844be1d39a1742d547efe1c9c27d624e8b03e
SHA256

982c1484b13b8737b117c51316225f6432836ebd8f0d64d789b9cc5e5d0fcb78
SHA512

d7d75bb02a369afeeb92113c65f6083c3303c4693c1bc8d1513ef20919f0465fd4bcc74c9f6269468a5f351c3611eb7b43c9505b5a7d7acdb19dae2629ce6f97
SSDEEP

12288:FnsQfVCI5foTKI/lLC4ZGkRlnSWsqvsmV2+DvgF438hfs19wo:Fn3NC2foTKwO4ZGkdSWsRm1Dg43I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cec830789a606549baea80f2de9b721b_JaffaCakes118

Files

cec830789a606549baea80f2de9b721b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Dev\cgames\ActionInlay\Release\Action Inlay.pdb

Sections

.text
Size: 492KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.garr
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE