7722f24ce4e54f4201112e0be359a7ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7722f24ce4e54f4201112e0be359a7ff_JaffaCakes118
Size

160KB
MD5

7722f24ce4e54f4201112e0be359a7ff
SHA1

73ff3115db0ddf8d596e99cec8c553d37efbb77a
SHA256

d5fa3336dd54b1b07cfdaa4b1d54529b553cade1b6f2e6fd4460253e4f49f6fd
SHA512

4ee648c9774a75f1c40ba8998986089e219bd14d51e86bef0a60d36ebdb2a016636a82c87c99e2bd6d5ac35afc40407ee0c80eb0086e17e40cc4549c0cb2738c
SSDEEP

3072:g8m8oBRj8u/fqS1NiM74wVZtiVNA4snYCqNPj9ySDcnBV:g8m8oj8uKS1f9DEOvnYCsPjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7722f24ce4e54f4201112e0be359a7ff_JaffaCakes118

Files

7722f24ce4e54f4201112e0be359a7ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Toshiba\Desktop\wow paysafe klauer\WoW\WoW Test\obj\x86\Release\WoW Test.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ