3f8a07ff908816426a01368863c5cece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f8a07ff908816426a01368863c5cece_JaffaCakes118
Size

376KB
MD5

3f8a07ff908816426a01368863c5cece
SHA1

16a3b695be73d189ac290587057da084a9146a4d
SHA256

7e81b7404f251cbd705a223310b488b9f8a24906462a08c8148aea252b884572
SHA512

f6478caa07e8b79ba54e0628d0d029248bbb8160d2c191a30baa3af7098c50dfa20b2bf5f0f74c67a4bd441e23079aeaab796289aa46d6e35557790069615909
SSDEEP

6144:14a4RTYfaCWYxyyw3j938YSxGflTUWelojCRAyffN9MXojyVMeTpZH+JUnuL:14a4OfaYkyCjtSxGfel0Ob3MXY6/H+JZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ForagerTrainer +5 v0.8.2.exe

Files

3f8a07ff908816426a01368863c5cece_JaffaCakes118
.rar
ForagerTrainer +5 v0.8.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\gitProject\MyCheats\Forager\Forager\obj\Release\ForagerTrainer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ