6bf92aa7f7aa43c16017f543571e4dbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bf92aa7f7aa43c16017f543571e4dbb_JaffaCakes118
Size

624KB
MD5

6bf92aa7f7aa43c16017f543571e4dbb
SHA1

203e6c9264eb696589f840035ec9364e646e411d
SHA256

5f67e951aa5cf94c36d93638ea5be45927752b0511659a2e09b841a5a0c3271e
SHA512

9eecb521b6ac99c13407c4c23e799a32214b1a6237f5dec0d6f783b812154e4dbc583e9b3bc08eacb9fc0ba2a862449fb8a9a9ff0379978f495a6c249fab9b83
SSDEEP

12288:4chKW0MD06zcgxOEEJhhHI3i333333633333H:nhKW9D06zAzhho3i333333633333H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bf92aa7f7aa43c16017f543571e4dbb_JaffaCakes118

Files

6bf92aa7f7aa43c16017f543571e4dbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Download\New\10\Orion-Game-Engine-master\Orion Client\obj\Release\Orion Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ