1b879279ee88cd473c6a1fda6565135a_JaffaCakes118 | Triage

Sharing

General

Target

1b879279ee88cd473c6a1fda6565135a_JaffaCakes118
Size

121KB
MD5

1b879279ee88cd473c6a1fda6565135a
SHA1

4495d959efea802287977a513fbd3adbd38cf597
SHA256

527e0cd13c5d06c79271a3bd873654e4d898f31843962d7bdd6ee1843bc655c0
SHA512

7a90c8544fbcb55d23e077f7b34f984ff380e76e2ab7fd8b6ae02c4d08645b3d94a271199a8d7dbca703815bf1482ced16bd98802a9e0d411c5d97776ace8674
SSDEEP

3072:JOrGPSAu1/iApLVUjJeOOlfcF6hOOBnGg/+Bk+t:Jwqdu16ATUj8tlCBqGgYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b879279ee88cd473c6a1fda6565135a_JaffaCakes118

Files

1b879279ee88cd473c6a1fda6565135a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kevin\Documents\Visual Studio 2008\Projects\Hacklegends injector\Hacklegends injector\obj\Release\Hacklegends injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ