faa341f52935e4cc1e1ec27ea21f760f_JaffaCakes118 | Triage

Sharing

General

Target

faa341f52935e4cc1e1ec27ea21f760f_JaffaCakes118
Size

18KB
MD5

faa341f52935e4cc1e1ec27ea21f760f
SHA1

841d5922d7d932fc1de31493928ad0fe51662828
SHA256

0128d2df89a185fc2806cb127b9921c460e97a095174513c2001e169c6d6c69a
SHA512

136973145c1659989c0567d20a64c218acc03ca79e71a28a514228d6bf12a6674e32e93ba54af950fa900f238aacd51ef6e989529b2ceb45b7926d0fa5971cf1
SSDEEP

384:dIS/0K7/5J+3BlCOy566H9V5rZXmsLFKZR/nGCA:WS/tj5J+fSV59WsZKZ3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QuakeLivePinger.exe

Files

faa341f52935e4cc1e1ec27ea21f760f_JaffaCakes118
.zip
QuakeLivePinger.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Tequila_Burp\My Documents\Visual Studio 2008\Projects\QuakeLivePinger\QuakeLivePinger\obj\Debug\QuakeLivePinger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Servidores.xml
.xml
readme.txt