0b3afdac26eb3f5073deb1eab31e69a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b3afdac26eb3f5073deb1eab31e69a4_JaffaCakes118
Size

126KB
MD5

0b3afdac26eb3f5073deb1eab31e69a4
SHA1

184aec3a7d7223ec9e538d47badd733e17a9479d
SHA256

af60e7b0b609deb73a60872c6274574c9ec5ea166a764d4df19d2d6abc39dd78
SHA512

54a995a4aaeebccf83c156a1e4266b0c4b4b8023c018ce11e1d662b5525f8447e160850673697ff89ac2aff4d29bd233d1ea4f7eb0a9667f7f0080d460f01d1b
SSDEEP

3072:L9xSZvrBIcQdfrRrzrg0yBI5h7D4bcijQK1doTajBf4cijQK:nSN1p8dgX+WjQK1doTaCjQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3afdac26eb3f5073deb1eab31e69a4_JaffaCakes118

Files

0b3afdac26eb3f5073deb1eab31e69a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Olusia\Documents\Visual Studio 2008\Projects\Empires'n'Allies\Empires'n'Allies\obj\Debug\Empires'n'Allies.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ