30cf2b0ffbab5fb0c6275c3c666e0fc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30cf2b0ffbab5fb0c6275c3c666e0fc9_JaffaCakes118
Size

362KB
MD5

30cf2b0ffbab5fb0c6275c3c666e0fc9
SHA1

83124baaf160d444f1181119e839500453e142f7
SHA256

8c2db4e008b4429f161fb703506c9daedf120683f4f2cad580da27102c7d03cd
SHA512

daf1f800271900d872f1e23b27cb50e245d9cb25c7336c38b500d3e09de727c504ff4110658eb3270cc2f6239dc6d570094bab7141ed7776a42d13763df34a4e
SSDEEP

6144:BpcDdH68JgzKbfMZiM/rfQVl6Op0ANLosLIkLWJLLFLxLe5RFkLDLuLHjP/nLhLJ:LCWi4IVVYc2ZY0Z36

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30cf2b0ffbab5fb0c6275c3c666e0fc9_JaffaCakes118

Files

30cf2b0ffbab5fb0c6275c3c666e0fc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\bgopa\OneDrive\Desktop\Chaosity Launcher\Chaosity\obj\Debug\Chaosity Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ