393ea8c30c8192cbadf2c9522266aacb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393ea8c30c8192cbadf2c9522266aacb_JaffaCakes118
Size

23KB
MD5

393ea8c30c8192cbadf2c9522266aacb
SHA1

3dc4e9888228a0d32ef554d435506b7697ea572c
SHA256

e1dd15ec347453cf6e6056a9280ac553bb46985e4e67db496117c6f674afdb8b
SHA512

d842b59067d151a4e21c4882e73c5d76e50d4d07d9088ec846768b5421c2d5135d93ff410590cedbe380888f23ef010f85dcaed761bea2c4978b1282bf8967d9
SSDEEP

384:TRdNc/8MweCrSnB0NyKbDXe+WsFzWv8iWabJLCB45RQfx1wW8hBTisVu/VOZNo:TRdNc/8MwVKigA7fRCCMKtOZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393ea8c30c8192cbadf2c9522266aacb_JaffaCakes118

Files

393ea8c30c8192cbadf2c9522266aacb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Owner\Documents\Visual Studio 2008\Projects\wh2.4 keygen\wh2.4 keygen\obj\Release\WebmailHack 2.4 Keygen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ