2bede448de009c8ebc2990204ef67d04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bede448de009c8ebc2990204ef67d04_JaffaCakes118
Size

303KB
MD5

2bede448de009c8ebc2990204ef67d04
SHA1

4461ffc0416a1e2142f57fd19cd4fca38ad5b64e
SHA256

a71e904a455eb31e014f6d1fe3f743bb561306211886bd153c66be676afa9078
SHA512

d11e2dd2cc80a3b5fc353af92c91bec8eec336553d8cd7caebb16a6dc8d2badeba937ac54d9ccc5ce556555d2059795ab0730908850fb6c1d01241b3100d937e
SSDEEP

6144:8EcZLPskWEgU9hKRSM/zc4rSGEv/LklzleHnMBnLVk4vNuPI:8EcZrmbU9hP8JrgslknMBLP0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bede448de009c8ebc2990204ef67d04_JaffaCakes118

Files

2bede448de009c8ebc2990204ef67d04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Documents and Settings\Owner\Desktop\Potatomaniac Injector V2\Potatomaniac Injector V2\obj\x86\Debug\Potatomaniac Injector V2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ