1496f424fa4391c07a5c6c47758e5cc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1496f424fa4391c07a5c6c47758e5cc7_JaffaCakes118
Size

34KB
MD5

1496f424fa4391c07a5c6c47758e5cc7
SHA1

ab5874f65a47037ce6873900170d31d504c2d598
SHA256

b63978f81fc68dc2d3acf9d5370f0c0286a8f14fa9f1ad6e87a80fb9fc125dc9
SHA512

7ea669051cbcbf447888fefc4b76ed8574f4503b8e3f56aa4072b91071d9a50d26f96ee653dd162722ba33eb43e20232403f4eba4d83ccccf1b18a45dc1f2fa1
SSDEEP

768:Aa3qGTzNYI8Zgn3dZ5HVec/wSOQG2dxVZu9O:P3qGdYx65HVeKwSOQG2dvZu9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1496f424fa4391c07a5c6c47758e5cc7_JaffaCakes118

Files

1496f424fa4391c07a5c6c47758e5cc7_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Adm3n\Desktop\ValveHacks Pub Builds\Css (engine 15) cheat sourcecode\Release\basehook.pdb

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ