3aa1335a192d0be1d6a9c99461cb385c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aa1335a192d0be1d6a9c99461cb385c_JaffaCakes118
Size

278KB
MD5

3aa1335a192d0be1d6a9c99461cb385c
SHA1

a32091c0f4c6db8ecda17474d46f2b893a1e9483
SHA256

ed516d4968360bbe73222172adda9024ca6c87891ed5c90dbc09f83dab71afbf
SHA512

91e166434778d525288cebb53f7d88f7924627aba1e08776d5dda7915376e569f70cec9257470d6b35ae87707300850085a3e21589fb0ccb08ed76d542da3d1a
SSDEEP

3072:xQSVb14zEMl+UYY67cw+mqcSBGgfVU27VBZpaQSVb14zEMl+UYY67cw+mqcSBGgu:xQc4A2U+YSBGjg8Qc4A2U+YSBGjnNI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa1335a192d0be1d6a9c99461cb385c_JaffaCakes118

Files

3aa1335a192d0be1d6a9c99461cb385c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Visual Studio - Source\Source - MU\MU Launcher\SelfUpdate\obj\Release\update.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ