3ef15fb743be57a0bee1ce3480574fd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef15fb743be57a0bee1ce3480574fd6_JaffaCakes118
Size

52KB
MD5

3ef15fb743be57a0bee1ce3480574fd6
SHA1

4f7b535c5017014ef3b86aa1f2ce25feb22bed06
SHA256

a6f9ea78c62e55bdac3748efc9798ac787247d4bda680a0563a299f8d723f791
SHA512

148a44c32ae0b8f955996e9c704b04eea742f9697aa9b25670283a48997b9a2c7110167e6d06547f2afa38baa68538fd1b4329141b0ea88b8b9a03e8cd759aba
SSDEEP

1536:iw7cdL7vG6FjRwIcym6jYDxB1A/eWvARsgvOpOB:iMcdL7vnF2Icy7A3ntvvOpc

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PussyHacks/PussyInjector_x32.exe
unpack001/PussyHacks/PussyInjector_x64.exe

Files

3ef15fb743be57a0bee1ce3480574fd6_JaffaCakes118
.rar
PussyHacks/PussyInjector_x32.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PussyHacks/PussyInjector_x64.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PussyHacks/x32.dll
PussyHacks/x64.dll