cf8b90cbaa6a20c73e03183e3f096b00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf8b90cbaa6a20c73e03183e3f096b00_JaffaCakes118
Size

1.4MB
MD5

cf8b90cbaa6a20c73e03183e3f096b00
SHA1

a3bbfa55951cdab309082eb94bc90be5350da569
SHA256

a4c67b682d074f28b22c88da460f1c0252f162e4f586861e177fe9d5b200ab1b
SHA512

c23504c4b71af09c1c1538ebbd4cbe5f46adab91ce3cc427d04272048fbbcee085244d00a06fa73bc32c07e8782e9b6c10754f7d553473da9966a0e138ec5d95
SSDEEP

12288:pcZPgSkKcZPgSkjQj3QhFz/eKDHw3/k6CcZPgSk7:sPgSkvPgSkjQj3Qnz/jHw3/zPgSk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf8b90cbaa6a20c73e03183e3f096b00_JaffaCakes118

Files

cf8b90cbaa6a20c73e03183e3f096b00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dell_user\Desktop\Maplestory Helper\Maplestory Helper\obj\Debug\W8ter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 367KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ