d4fa7ed906c96c3bfa16dc3875853ddf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4fa7ed906c96c3bfa16dc3875853ddf_JaffaCakes118
Size

278KB
MD5

d4fa7ed906c96c3bfa16dc3875853ddf
SHA1

d569fed8d5aeaad3856603cb70020b00d43b0613
SHA256

65bc8219aac744cde792ae9a96bd8296735b68135499b80d0837208424912799
SHA512

232dc06a47c06d263142beeb1b5935b2eeb5391fe5c24dd4f4ee6e345056796db3f6edbcb6dd648b2249f0430707e50064b1d36837c8ab432518ed01c9edf3ba
SSDEEP

3072:7JQSVb14zEMl+UYY67cw+mqcSBGgfVU27VBZp8QSVb14zEMl+UYY67cw+mqcSBG3:7JQc4A2U+YSBGjgyQc4A2U+YSBGjnHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4fa7ed906c96c3bfa16dc3875853ddf_JaffaCakes118

Files

d4fa7ed906c96c3bfa16dc3875853ddf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Visual Studio - Source\Source - MU\MU Launcher\SelfUpdate\obj\Release\SelfUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ