c0f7b4477e559456b1e5c931fd79cbe5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0f7b4477e559456b1e5c931fd79cbe5_JaffaCakes118
Size

1.2MB
MD5

c0f7b4477e559456b1e5c931fd79cbe5
SHA1

ea0687f83b3671266b4aee4cc3b6b8f78588d2cf
SHA256

57d9ac79723ea971a7278ea3925fe0b35734ea1e2be82378f6ffd0580acd3459
SHA512

960b4761b792dc65a7e60eb9f742032ff6b6ec124c9feb22e71c77a0bf7cc3ad75fc4452f82800bf986030c48b98fc3baa1ae8b50473d028df08f75378603049
SSDEEP

12288:hnLP1uQOICogBblYIvH3jt+xudMiG4Lo2eZmMCF5/cJvynT:hpLOICoSCMk/zBI5/manT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0f7b4477e559456b1e5c931fd79cbe5_JaffaCakes118

Files

c0f7b4477e559456b1e5c931fd79cbe5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Other\Projects\Launcher\Launcher\obj\x86\Debug\Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ