3d88c2dd2ea04df0223b0e02388342d9_JaffaCakes118 | Triage

Sharing

General

Target

3d88c2dd2ea04df0223b0e02388342d9_JaffaCakes118
Size

88KB
MD5

3d88c2dd2ea04df0223b0e02388342d9
SHA1

88702e1f7a5d5181844bc083d85156e30c5711f8
SHA256

2a43c5a18923d02d2aa4153378cf7c34d2347f24c30cb992946d8617f2eb0a63
SHA512

30ca7b6abff487c505ab0a213046228d01b15a92fe5d0048b041af8ed48a643d4a89c3f4723c4f8ab78ea8f6037877af64adce7a0708e93c1e041b89e3e696fc
SSDEEP

1536:VBf7mqux+uVCeEqnHNj/D+sZuL3RadioEig6R1WAHwrlcgnBYms:V9xxuVnvHNjLit/oEig6RYnrKOBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d88c2dd2ea04df0223b0e02388342d9_JaffaCakes118

Files

3d88c2dd2ea04df0223b0e02388342d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bauke-Hielke\AppData\Local\Temporary Projects\WarRock-Hack.NL injector !\obj\Debug\WarRock-Hack.NL injector !.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ