40b3093c0e1bbc0382362b4420bc79d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b3093c0e1bbc0382362b4420bc79d8_JaffaCakes118
Size

2.3MB
MD5

40b3093c0e1bbc0382362b4420bc79d8
SHA1

3d1fbc747a394fb907caa3a81fd8f8282479ec84
SHA256

e026b4e6ffccd4f1062d1b72af39bfb91274dfc60a1ac2a1d6f7cde49b0c31c5
SHA512

185acb89384cfe7b8cf63fff475becca35df4a717a6b4c2449d52ac2f5f1b03c277d91d4e749c87fd856169a30b3d3d6c52da6bd19747381d1767ce50356d79e
SSDEEP

49152:CvTP17VIHN0fQ01sC3wnFIciFyvdWEYGco1E:Cv7kyfR1sNYFyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b3093c0e1bbc0382362b4420bc79d8_JaffaCakes118

Files

40b3093c0e1bbc0382362b4420bc79d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\internet projects\UPGRADE\Multi Install\NEW\NOWE\Devil May Cry 5\Install\InstallShield\InstallShield\obj\Debug\Devil May Cry 5 InstallShield Wizard v.1.2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ