4c052e06593715d6eca291f79f2891fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c052e06593715d6eca291f79f2891fe_JaffaCakes118
Size

24KB
MD5

4c052e06593715d6eca291f79f2891fe
SHA1

61c694e89e42b9796a859e80a62385529281bf0b
SHA256

2027524b54dfcd1aac77c7ae81528053e5f395cb42a548d45a5979e313db26db
SHA512

739c97675a8cd17784ad065f0d00c5dd66d262a1e580ff1fc9f0cf3c0b7c93020830266c9297d2f41380227d38616d6f77f120b45b86709b704a4d38d978a410
SSDEEP

384:IGsStHPhZwPopfZfsTrKauvQrApTyw+7G6IZfB9MEHBYpy2J9u+Z68F:IMhYApBEaQGywDZfB9pHBY/J9u+g8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c052e06593715d6eca291f79f2891fe_JaffaCakes118

Files

4c052e06593715d6eca291f79f2891fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\TERMINAL_TFS\Self-Service Betting Terminal\BetConstruct.BettingTerminal.Installer\obj\Release\BTI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ