8d80a8fb84ab09a7bee100cafe4a3c56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d80a8fb84ab09a7bee100cafe4a3c56_JaffaCakes118
Size

395KB
MD5

8d80a8fb84ab09a7bee100cafe4a3c56
SHA1

e2303e0c25206fa0a006fa6ab80d031e94979d2d
SHA256

a683a307c92adb87ec86bb2ad5dcd04913e3ad961dc8cfdc9941e611f6f55ff0
SHA512

36c70f8814af479c22edf39851c8d821b3daacd7413c145eae43564f21cced9a2a713dc936c48057199c78fd14ab8287fdbff3eef2dff177ceffab754fa892b0
SSDEEP

6144:GjV+dcDwdf0UD1NYjPjzfKGqrkajV+dcDwdf0UD9NYjPjzf:2cdrdfN2jPjzF6cdrdfV2jPjz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d80a8fb84ab09a7bee100cafe4a3c56_JaffaCakes118

Files

8d80a8fb84ab09a7bee100cafe4a3c56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sinan\Desktop\Coding\Injector\Injector1\Injector1\obj\x86\Debug\Injector1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ