284456159df9b58840514a56f6c12123_JaffaCakes118 | Triage

Sharing

General

Target

284456159df9b58840514a56f6c12123_JaffaCakes118
Size

55KB
MD5

284456159df9b58840514a56f6c12123
SHA1

66906a7ea82d5ea9f5498d440b1827642cae0b9d
SHA256

d947c89d818a7a2e2ae439360257f4f4661d2edcb2e41edbb317f20e9298f971
SHA512

6d56a4f5d7d2b1c2c54a2382d9c86f14c7f094f59cb7386f0af5d8c5e2a72e36986347bfed552a0190fcec6a008073a6a8c8b0ebbf30f989b496e0c61c6f8477
SSDEEP

1536:i8n0nuRNxJqD8YXwBckePuvqPaqb2fZe:iPMNx55BeGvYN2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
284456159df9b58840514a56f6c12123_JaffaCakes118

Files

284456159df9b58840514a56f6c12123_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Hakan\documents\visual studio 2010\Projects\G1 Hack\G1 Hack\obj\x86\Debug\G1 Hack.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ