003661f0e3e6a2913f73243226d15bd0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

003661f0e3e6a2913f73243226d15bd0_JaffaCakes118
Size

1.4MB
MD5

003661f0e3e6a2913f73243226d15bd0
SHA1

95f744ab2a7e2156d757fffadf34022b55c06fc1
SHA256

9b51c7c35be7762dbe4b9f846a9a10bee247a517f54e4b61b6896503aed81c73
SHA512

a83ab49b7240d0bf7c70e3e171bfe826bd4f4c27bd8a386f88796d39606fc8ec39864096613cfbb5ee36a469a2f2c40f590f9a2366d6083b35a5b8cfec9065ee
SSDEEP

24576:AcUCfIeJCj92bv6Ta6eZZ4zaERFhyDRrCfIeJCjRZw6uRLO/cgPRY:jUpteb4za8hyDRrpU96/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
003661f0e3e6a2913f73243226d15bd0_JaffaCakes118

Files

003661f0e3e6a2913f73243226d15bd0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Miky\Desktop\2\tm\4Metin Autopatcher\obj\x86\Debug\metin2TM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ