de4f58732037a6cd5b130e7111e124f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4f58732037a6cd5b130e7111e124f7_JaffaCakes118
Size

309KB
MD5

de4f58732037a6cd5b130e7111e124f7
SHA1

0d463d5fc5457fcfd10573201214cf6a8c93c600
SHA256

b9518f996bb9262a8fa6f791b8cafe8cab98fb2c91316b03caa110857e0b8bc4
SHA512

899d100513cf8f1dc12892ec5d2921ab2075e6142d5039886f7a5ce300a80dfb0c7da0082f7d9cb56f2dcb6f7c290eab78d5b4ea029ee3d4112ee2a4b6322970
SSDEEP

6144:/vdmLCx9n3i/a9A+CpESC3p9NcjhJElT+wBbk9A1fOekrK:3dl9n3i/gLOES6nclJ0b5kYfOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4f58732037a6cd5b130e7111e124f7_JaffaCakes118

Files

de4f58732037a6cd5b130e7111e124f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dabdoub\Desktop\DZ--DZ\T@m mario S. 2012\obj\Debug\winrar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ