442c067f0d52b52c6e084d265e835612_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

442c067f0d52b52c6e084d265e835612_JaffaCakes118
Size

145KB
MD5

442c067f0d52b52c6e084d265e835612
SHA1

3d0e268f1e24afba166f85a814bc4df146bf3646
SHA256

b4ecfe9d88d80680d347bf1a1d5aa8abde4ddaa463ff73f91a32d9b783dfdc5c
SHA512

57d15da1cc49fb9b76b2de91774c67390b6ef88556265903da620ae0699111a2b282f17eed4cc6383465bb3a9431f37bb514101a32251e8f983cbe30f5b948f1
SSDEEP

3072:EORt3eb+SePJE0OrafuXml6HWLpj9ZmGoRk+on4I9pRI0leOUeQnVXzPy5wMPYYr:EOR954D0kad9qnFXbYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442c067f0d52b52c6e084d265e835612_JaffaCakes118

Files

442c067f0d52b52c6e084d265e835612_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Valetti\Documenti\Visual Studio 2008\Projects\Player\Player\obj\Release\FacilePlayer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ