e9c9899985139d033ff12a6a6568609f_JaffaCakes118 | Triage

Sharing

General

Target

e9c9899985139d033ff12a6a6568609f_JaffaCakes118
Size

17.3MB
MD5

e9c9899985139d033ff12a6a6568609f
SHA1

5004b3286d6d0a34e5e40fd658bdcb1039941cd8
SHA256

7627771ca00f408f7a4fd61d85e944ce379f48dcd965cbdf934e6deecb7f315d
SHA512

bb18bd30db2af1a7222b8c84eefb7e0f08ce873adcbd0c3db88dda0871431f6e9688ca2b24cc9bd55d49a97e2fb4ac31df66be57ef7cfc3110ac1d22fa57be45
SSDEEP

393216:6UgAzHM7Muw7757395EEB1D+E7lBLKXTDTp3qG:6yzHuMl71ThB16EjeHt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9c9899985139d033ff12a6a6568609f_JaffaCakes118

Files

e9c9899985139d033ff12a6a6568609f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dylan\Desktop\Test\GTA V.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17.0MB - Virtual size: 17.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ