878432398c923451433aaa3415a0e2ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

878432398c923451433aaa3415a0e2ac_JaffaCakes118
Size

23KB
MD5

878432398c923451433aaa3415a0e2ac
SHA1

c978b812a499b1ad8fd76da557d833ce7737e408
SHA256

85d5a5f723e84718b7c9330dac663113d90b884648368c5a79ea4337a9ee12db
SHA512

4a1453e79628abbb3f354d79247598cc112b8d42410a65be857db28b532e825b428024e3538ee0c0c7c3d69e24f58a79498de02c518e120f7a678084545a5022
SSDEEP

384:dRliHQqzh5LMK9RAww3XWHLk2456a3X3Lk5N6noMfc:dziwq15LMK9aIrImN6oMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878432398c923451433aaa3415a0e2ac_JaffaCakes118

Files

878432398c923451433aaa3415a0e2ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin\Desktop\MMO Hidden\MMO Hidden\obj\x86\Debug\MMO Hidden.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ