27f1278c5438b490238f43c11eb74b73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27f1278c5438b490238f43c11eb74b73_JaffaCakes118
Size

554KB
MD5

27f1278c5438b490238f43c11eb74b73
SHA1

24308baecf535688cfb887e487e849e3f375f69e
SHA256

c64fc546a39a47e43809de20f73cbeb2b6aee640a1a11213c7e46bdb9303aa8f
SHA512

1ce833950155b88493f274b4b88797add2453ba079e21ce60b7f6179dc9b693eaef2014c359e362370c37cd05a0bc9f581345b7989bda42d905c8cc1b205ca92
SSDEEP

12288:8KSJsQ/aP6OBffD+SOFzNxTz7FcB9uXzUV2h8ZRgOf:hSmd5+pTxf7GB9ujv8ZWOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f1278c5438b490238f43c11eb74b73_JaffaCakes118

Files

27f1278c5438b490238f43c11eb74b73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\steven\desktop\documents\visual studio 2010\Projects\M.A.T Injector\M.A.T Injector\obj\x86\Release\M.A.T Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ