70870013ba7e692d4e15034f6abd2cee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70870013ba7e692d4e15034f6abd2cee_JaffaCakes118
Size

104KB
MD5

70870013ba7e692d4e15034f6abd2cee
SHA1

1e2a45b9c017df0fe204b61d96f4e82e6a9822e3
SHA256

5bacdaaab0355f6de19def58d8ecb0ba183405bb47c81eb536bf396b1b23f91f
SHA512

b3332eacfce0cb3b995121afb45b27e253c4dcfa04b3991af9037cd435e5792bf9c7abeaf333bcd7335aa5d4032f76ce1c3d19dfc52cef2b73ec2181889a2c54
SSDEEP

3072:NtG1ta5Hr0P9cNKPtkIzDC2aJDeEsXcXPBQA6S4Q:NtGwQ9cEzsDeEssXPBQA6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70870013ba7e692d4e15034f6abd2cee_JaffaCakes118

Files

70870013ba7e692d4e15034f6abd2cee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Patrick\Desktop\Ivy\N0ise Bot\N0ise Server\obj\Debug\N0ise.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ