a624e817eb869ce0d58101a803696075_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a624e817eb869ce0d58101a803696075_JaffaCakes118
Size

198KB
MD5

a624e817eb869ce0d58101a803696075
SHA1

a0ad5007fe808017f64e1b2b9664c8f6f6d8e6df
SHA256

c88538bb96b83b1f71e3655002bb81fcba80039b2121d335d63c39212f9551f4
SHA512

4d87b800abeb9db5e1780993880bd422342f274c0809a7140309de5cd2e7e8a12e709df76264da8f10d24b4e60b61d0244c8c5adeac2fbb9462a9468aae5f505
SSDEEP

3072:njTk1NU8MSUAXIyBGnj9379lDllzS3FaVn3BIFcMtsCINPDlfOGPpjT:nnmpJq9379lxVS1a8TtsCINBOgn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a624e817eb869ce0d58101a803696075_JaffaCakes118

Files

a624e817eb869ce0d58101a803696075_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\casa\Desktop\Cose Metin2\Source Autopatcher\Source AutoPatch Arteos2 con argument + updater\Hydra\obj\Release\Hydra AutoPatcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ