e17372aca738fbbdf1bac752b5cd4c6a_JaffaCakes118 | Triage

Sharing

General

Target

e17372aca738fbbdf1bac752b5cd4c6a_JaffaCakes118
Size

2.0MB
MD5

e17372aca738fbbdf1bac752b5cd4c6a
SHA1

d493006a310bfc1234e8e76420a5722fe49bcc5c
SHA256

c5f027d8168ccba877529acda7904b0a91ef50fedcc45aee10d5a8b2aa700aa5
SHA512

f5969ed5bfa134467fd3a3cf7f1e612809144835bbdc12a8cc094f54dc8458c8f4f9331956417fcfd38c7ab8239f173b7f9e55c68d3c83833d673e8b62ffe4e3
SSDEEP

24576:H1OT7wDHS1RT7wDHS1e+nN6P0EirQT7wDTSR8JcEEw:HI/wDu/wDx+vk/wv5Jcv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e17372aca738fbbdf1bac752b5cd4c6a_JaffaCakes118

Files

e17372aca738fbbdf1bac752b5cd4c6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\PC\source\repos\sm64pcBuilder2\sm64pcBuilder2\obj\Release\sm64pcBuilder2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ