ea12588f862097a65c4a206d9cff6f7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea12588f862097a65c4a206d9cff6f7b_JaffaCakes118
Size

125KB
MD5

ea12588f862097a65c4a206d9cff6f7b
SHA1

314d15224145dbd28b83b2f39933515a4b67065a
SHA256

d03845691b26e1851e0e1f18eef2d5c5af89c87b47ec4dd15cccf266dcaa1ffd
SHA512

4c09d72f3f41e336713df169b2e86191d87b3f81c8d2fdcd6bd7cf446cea2ee4be569b53d495091e9019b72435b69e1c07da7fc3a73fd951720e84e06b05cbe3
SSDEEP

1536:NygdhG+caRMk7rr1b7ixVv8+QzOwt3YRecIbhBCBE8PwdpuwVcl:NygMOb7ixVv8NftncmCUpuqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea12588f862097a65c4a206d9cff6f7b_JaffaCakes118

Files

ea12588f862097a65c4a206d9cff6f7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Shadow\Downloads\TX-PRO-Sourcecode\TX-PRO\obj\Debug\TX-PRO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ