9b725a2dc4fcd8a98376fd999e0f7ba1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b725a2dc4fcd8a98376fd999e0f7ba1_JaffaCakes118
Size

2.5MB
MD5

9b725a2dc4fcd8a98376fd999e0f7ba1
SHA1

918eaf5df84226789cbf7db93e99740a329ac700
SHA256

536da5f566d42af8e99c43b11fe62cc60cec155371734c7bca4d31b083480b77
SHA512

0d98ae972f23c122a630cf0ea420b10fa5a2d74859d5dbe1932ec7f5131fac98dcb2c328d37bef079d5f49c08b5bf59d83a290a8cbf4bbea9b51c52a12b0d27d
SSDEEP

49152:bUewlPbpAGSRWR2zXISDRhVLXQexKooGqXCgWuvz:74PbpAGSRdzHRh0oPq7W4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b725a2dc4fcd8a98376fd999e0f7ba1_JaffaCakes118

Files

9b725a2dc4fcd8a98376fd999e0f7ba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Yannik\Downloads\NoctisServer (1)\NoctisServer\Launcher_Client\obj\Debug\Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ