67ae6422c804e62711beb6d9d63617c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67ae6422c804e62711beb6d9d63617c4_JaffaCakes118
Size

39KB
MD5

67ae6422c804e62711beb6d9d63617c4
SHA1

0c6505ba090622f77b968a2eedc3514379145f32
SHA256

913dd0e95e578909f477d1eae407deb6b9eae8bb856c8c2852d43f8f3d8ae4ed
SHA512

a24b3d0c4424929b0106b5dcbaec944987172d98502f660a7e99b36a799173e91336b82d660cd74b070281ecb71df7a736cb43cef62071ad3b56375992062de7
SSDEEP

768:fFr6CCDFT5gOD0TRxvd4pAqwRAPDrJKoijiHUaV+9cy:nqgLT7+XwRAP3j0wIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/phx Injector.exe

Files

67ae6422c804e62711beb6d9d63617c4_JaffaCakes118
.rar
phx Injector.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\stamatis_2\Desktop\desktop\Visual Basic & C++ (etc.) Projects\phx Injector\phx Injector\obj\x86\Debug\phx Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ