0f61f1fe9c42375e0540628757ef91bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f61f1fe9c42375e0540628757ef91bd_JaffaCakes118
Size

233KB
MD5

0f61f1fe9c42375e0540628757ef91bd
SHA1

a40cb56a2d8ca0dab7c430e26512015f7d5dde6e
SHA256

cc45297f9d2b8624b59d0dd3e863717fc520c583b6011a4c2459308321588d9a
SHA512

0f2e54c5bdff59dda9bb6c2997aeed49d65b628d0a1962052691cafb1ff77fa394aff97cd826d95004e92cb4f60a98de70c5da75c43f95f5677d5ce38c153f49
SSDEEP

3072:QUuAvW/ejQocV2qV948vKLbMdfo5fkd2ISYIwphPVPCBefiVH3p6iKbbbbkLF9bH:QJWo2qs8vW8fDdDSNKVCBlxsiRIeOfi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f61f1fe9c42375e0540628757ef91bd_JaffaCakes118

Files

0f61f1fe9c42375e0540628757ef91bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Adriano Riquetti\Meus documentos\Visual Studio 2008\Projects\xDLL Injector 2.0.0\xDLL Injector 2.0.0\obj\Release\xDLL Injector 2.0.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ