8dbeb83f66dfc5f87662215b8a79e9bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dbeb83f66dfc5f87662215b8a79e9bd_JaffaCakes118
Size

413KB
MD5

8dbeb83f66dfc5f87662215b8a79e9bd
SHA1

9859dab2ab5960147ba0fa06c271c6b265d15960
SHA256

00a2c4f067f12ca10a78e67860f932dda78e33971e95b75a1f5098f3d6eec4cf
SHA512

c354769efdf807065df9df149871ef53e49ded994c40cbd4f6551599bc07e71235b454fa6fb95fdf7e9dba53784d7ff2d924dbcd18a946b38e6ce7c95d255b66
SSDEEP

12288:cXcwBIxjC8sihhriutv0mcCbALhppTuoYqfE:cXcAIxjI2tiudIXLRvYIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dbeb83f66dfc5f87662215b8a79e9bd_JaffaCakes118

Files

8dbeb83f66dfc5f87662215b8a79e9bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Brandon\workspace\Genius\Toolbars\v5\Genius_v5\Genius_v5\obj\Release\Genius.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ