926880ac1b9ead93f41bb7a4b98fcb2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

926880ac1b9ead93f41bb7a4b98fcb2c_JaffaCakes118
Size

181KB
MD5

926880ac1b9ead93f41bb7a4b98fcb2c
SHA1

2e1435457af1ef69d48ce9377de0cb0c400a1667
SHA256

0a9d5c80f9b06ceb6adef747ef2088be11d99d20a526c938c34457e2dd813fa0
SHA512

61fb438acafe90c0eb3d38dcab6a40cd7fab84d87aae4d32a3dd074291b89882f34a660b7770ce65e79b4e1c0e1f31ba529c4f76fc640d54677cdad86d23eebf
SSDEEP

768:1s+7jMjE0N7KhZG1mwE7LFiw0Wel7F0N7ShZQLmwE7LFiw0Wel7SatYcFOKc6K:yXKh5O7iShBO7S2OKcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
926880ac1b9ead93f41bb7a4b98fcb2c_JaffaCakes118

Files

926880ac1b9ead93f41bb7a4b98fcb2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\FREE\Desktop\GTPSLauncherCSharp-master\GTPSLauncherCSharp\obj\Debug\GTPSLauncherCSharp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ