0d5843edd371550ad848229707c5640a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d5843edd371550ad848229707c5640a_JaffaCakes118
Size

485KB
MD5

0d5843edd371550ad848229707c5640a
SHA1

5a37d649a2a12f846d084bf86521adb42cfda56c
SHA256

710d098723a538c6bd0b6f50a24199f21079178b24be224cc030a10ab193d9ae
SHA512

bc24eab3aa0721bf1e0022093fb070e9b5c0564a49b5445bcbd144fccda6fbf67a793e5fc10c2987a2fd3a2d7490efd9de67ed209477bfeb02eb2c2151229777
SSDEEP

6144:uo4kwHxLoWereQwhO1JjrgT0RBkwHxLoWe9eCNhOL:EZBt41xrgT0RBZFy4L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d5843edd371550ad848229707c5640a_JaffaCakes118

Files

0d5843edd371550ad848229707c5640a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\jack\documents\visual studio 2015\Projects\MC Server Console OP\MC Server Console OP\obj\Debug\MC Server Console OP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ