86d1c38a7ac9ea3be91cc5bb4045ab1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86d1c38a7ac9ea3be91cc5bb4045ab1d_JaffaCakes118
Size

552KB
MD5

86d1c38a7ac9ea3be91cc5bb4045ab1d
SHA1

9459ae80d908535adf3c4a00278eaafa4af2a01f
SHA256

bc176fae0ebd017becec1848ac73d0c3975dc0bf367d0381c5c15c238408c89c
SHA512

8e95d42b80c24f472ca7bedadf80344583b5e4170a44c244696129a9db3acf44e345238cd16c3b91a3a12ab62f4dd03cd20c3bc79da07baf03479db3fef833fc
SSDEEP

1536:6P0xHlCVvEZggZkdZVsRECj+rsyNmrLhllCVvEZggZkF:60xKigvzV8ECFb3hAigvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86d1c38a7ac9ea3be91cc5bb4045ab1d_JaffaCakes118

Files

86d1c38a7ac9ea3be91cc5bb4045ab1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Cem\Desktop\Atlas Rp\Yeni klasör (2)\v3\AtlasRPLauncher\obj\Debug\AtlasRPLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ