59dfc9fd72bf8a7552007d73688a8c47_JaffaCakes118 | Triage

Sharing

General

Target

59dfc9fd72bf8a7552007d73688a8c47_JaffaCakes118
Size

4.0MB
MD5

59dfc9fd72bf8a7552007d73688a8c47
SHA1

ac2b5f8a8078e4ec00c48e64dc4aa14ac0d08ee5
SHA256

7c4ed3498c7013d3ca649233cfab106c6d9e8f8ca3c98a2e632cb9424921a6c1
SHA512

939f4f596b460163ef7906bee622d7225a63e343abbf6a488c500c92a7ab8638bb9d4e52321d045f8701220e227735d4f08c2962395d0bf8b8d9ff62bd174426
SSDEEP

98304:SMd8Dw2w90DdhGndb5DIcJXQpsG11kc/f0A3Ez0kmCNInMb5IIcJ:SMd8Dw2w98QZgpsWkc/shgkNaZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59dfc9fd72bf8a7552007d73688a8c47_JaffaCakes118

Files

59dfc9fd72bf8a7552007d73688a8c47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Uixs\Desktop\LAUNCHER SOURCE\obj\Debug\Aldeia RolePlay.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ