effd31a7b3726806534eaf8e46e2f346_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

effd31a7b3726806534eaf8e46e2f346_JaffaCakes118
Size

101KB
MD5

effd31a7b3726806534eaf8e46e2f346
SHA1

2448949358b6befb3d80b5453038a5c4b3532bd3
SHA256

61179b03893756eb5ee93c96b8bbedcbe6887e8edb8cac77ac46b348c7f0ceda
SHA512

30ddb8316842bb528d4d0835fadbd6c70c77347773c16a2ac071259e5d182da6ac4d4742df212e8622efd1610a4e0b8c4c138b88e8dfa6f0bdc3f6abe85450de
SSDEEP

1536:08Cyh3sPZX8QEaNzT0vGQrjXAvjUaw0Mjyt62Qg0mnDzqSx0VZMObIkGKNX21GIU:0vPPZ5EsPs7zE6kRHfxgZMODGnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
effd31a7b3726806534eaf8e46e2f346_JaffaCakes118

Files

effd31a7b3726806534eaf8e46e2f346_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dabdoub\Desktop\DZ--DZ\T@m mario S. 2012\obj\Debug\winrar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ