14c959ebc93b3c6e99752e2c6db82d2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c959ebc93b3c6e99752e2c6db82d2a_JaffaCakes118
Size

19KB
MD5

14c959ebc93b3c6e99752e2c6db82d2a
SHA1

168eb862e8a19103e02f410f41a9b2ba07da5ff6
SHA256

61cd02dae9675420e2c008ea59bee440eaaf9858ec7612d3fb65467f384b1f07
SHA512

a1af2897979230cfae8706d36538399c3923c959f7068d8e434724be50766e3e552db4d72084be48833d57ac9b68b22976f8bdc4d85ea454693aa6f0be3158b3
SSDEEP

384:avP96uHtmazJdxMHJQDV0JLf45cQfuAt8igOL:qtmfOD6NtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c959ebc93b3c6e99752e2c6db82d2a_JaffaCakes118

Files

14c959ebc93b3c6e99752e2c6db82d2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Rid3r\Documents\Visual Studio 2008\Projects\RL-Injector\RL-Injector\obj\Release\RL-Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ