f01640d6d67c1e62d600700bb7a2a9d4_JaffaCakes118

General

Target

f01640d6d67c1e62d600700bb7a2a9d4_JaffaCakes118
Size

448KB
MD5

f01640d6d67c1e62d600700bb7a2a9d4
SHA1

6b0be63fbbc4f8497ac72177db14f7af810dc7dd
SHA256

9fa1edbb79aee6d7aef665260907bf541f3c5779d917c507558890bb14d5b695
SHA512

80c923fa37da148aeb285c89f52324673b62a3c2a426ab53e9a3d94899015e9ce8b4dd499874e86f07cd8759de31f0bafb9ac188812c858cd071eb460ec49b54
SSDEEP

12288:XzmskEYfQBfILNjqFHC1STuVPmQfmfpIv/4fWd/ebszx:XzFkEnfIxqRWSEPKfpIv2I/ei

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/The Binding of Isaac - Rebirth v1.022 +6 Trainer by SeryogaSK.exe
unpack001/Trainer Checker by SeryogaSK.exe

Files

f01640d6d67c1e62d600700bb7a2a9d4_JaffaCakes118
.zip
ROXOR.nfo
The Binding of Isaac - Rebirth v1.022 +6 Trainer by SeryogaSK.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Trainer Checker by SeryogaSK.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\seryoga\Documents\Visual Studio 2010\Projects\md5check\md5check\obj\x86\Debug\Trainer Checker by SeryogaSK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 601KB - Virtual size: 600KB

DATA Size: 24KB - Virtual size: 23KB

BSS Size: - Virtual size: 4KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 38KB - Virtual size: 38KB

.rsrc Size: 223KB - Virtual size: 223KB

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 87KB - Virtual size: 87KB

.sdata Size: 512B - Virtual size: 172B

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 12B

CODE
Size: 601KB - Virtual size: 600KB

DATA
Size: 24KB - Virtual size: 23KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 223KB - Virtual size: 223KB

.text
Size: 87KB - Virtual size: 87KB

.sdata
Size: 512B - Virtual size: 172B

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 12B