2eaceff1c2ec735cefe487560a478f1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eaceff1c2ec735cefe487560a478f1f_JaffaCakes118
Size

122KB
MD5

2eaceff1c2ec735cefe487560a478f1f
SHA1

f642ff4c84cd52de34c9ca40fd1d53be623d7b5e
SHA256

24312fc67138160c80ebae76875fa948420e24387a9c0e0e73677918f87a883a
SHA512

30cbf304b2a3b48c8d00c47df31c3d4f1df33a1094987be7100361bb69116085d6601f594050cfdd2fc124d9f5cea47bba43953ce31c3c84af6fa3d2ed237f9d
SSDEEP

3072:0XO2jRPcHLeJEpxcFc4lAYubylpRdZL6SZUQpmIA:zSJ6V4SyBL6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eaceff1c2ec735cefe487560a478f1f_JaffaCakes118

Files

2eaceff1c2ec735cefe487560a478f1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jordan\Desktop\Paradox Coding\ParadoxRAT Client\ParadoxRAT Client\obj\x86\Release\ParadoxRAT Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ