25ca098b5ddc3c172d2f8279c932f93b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25ca098b5ddc3c172d2f8279c932f93b_JaffaCakes118
Size

2.4MB
MD5

25ca098b5ddc3c172d2f8279c932f93b
SHA1

53317795a463862831f65c4e048925407424b5b1
SHA256

ea92c56af10ef99fff9904ab72bc34910e0614b18ea13b3d61027875ef598077
SHA512

0c6159875e61a0c3135f77babb378e8a08512664b419e5cab74e461a7f429425bb6573b6f863838423edfaf1ec9db4c1d4a4aadc41c45ad9b6d3970c0ce100cf
SSDEEP

49152:n///gKhLcoz7TF6mFczfm9pusbivkOZ+2hUx:IKhkgie9pZbi3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25ca098b5ddc3c172d2f8279c932f93b_JaffaCakes118

Files

25ca098b5ddc3c172d2f8279c932f93b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ivan\Downloads\Source Launcher PvP\Source Launcher\Net Launcher\obj\Release\Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ