eb2077e8442b50f2ac5455e877b19040_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb2077e8442b50f2ac5455e877b19040_JaffaCakes118
Size

700KB
MD5

eb2077e8442b50f2ac5455e877b19040
SHA1

6504a9b0c82b221f4bb35ae6ec2797c94f442e10
SHA256

4333dea282496ca4f4630b298ca0c2dfc2c536b9e2ccf41fcbe4bcbcc6a157a3
SHA512

37d343f042fd446ac3a210bee826202ff7045b5cb372e83cd2948b5dd3010477eb5e171a33f030a09c4026927dfe991ae92bf77fe1f7973b948955b8bc43ec2c
SSDEEP

12288:m5UFCGwxfz6yMcBr7LYg7ygV5nPTmvDNFK5UAqY/9Ysmp/M4H:6GwJz6yn71L76rPKyAqY1ZmOi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Keygen.exe

Files

eb2077e8442b50f2ac5455e877b19040_JaffaCakes118
.rar
Keygen.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Chill\Desktop\New Builder\WindowsFormsApplication1\WindowsFormsApplication1\obj\x86\Release\DevSpace.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ