e822c24697196c2b38698dbcb178962b_JaffaCakes118 | Triage

Sharing

General

Target

e822c24697196c2b38698dbcb178962b_JaffaCakes118
Size

9.0MB
MD5

e822c24697196c2b38698dbcb178962b
SHA1

9e7fdd8597e4552b04335158791d903ec6acc53e
SHA256

8fcd1fbc7a4a72497a19ce594865e280bf48bfd86f411c1ed28d28544f4a24fd
SHA512

54607e35620f125df9ae822bcd0a846e355fa56b88b70fe3ecfa31012d750702ec84de3bbe7e27cf547ae27bd22c1f11775c35377a177dd47dacbf6dfc2a8139
SSDEEP

196608:YxxadqQA1ILKYBcltnAvJiqYa1Rtgm6wnjPeisflUxK:a1QoYBcXnANYa1f6wniiIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e822c24697196c2b38698dbcb178962b_JaffaCakes118

Files

e822c24697196c2b38698dbcb178962b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SoftwareRG\Desktop\MuOnline\Sources en General\Launcher NEW\Launcher PREMIUM sin custom\Installer\Installer\bin\Release\CryptoObfuscator_Output\Installer MuOnline.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ