8e9b14ea6ca2d549e3332594be5dfee7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e9b14ea6ca2d549e3332594be5dfee7_JaffaCakes118
Size

144KB
MD5

8e9b14ea6ca2d549e3332594be5dfee7
SHA1

2883ccd0611b2d92526f2a577e61b0e4808f854b
SHA256

95dc78dd6e04d7bd0f87a7295e36083b00cc64db4f7f8072f3a514e3ab4d5305
SHA512

7d052be12ac5e390f49c8f8ff4bca7a2f3ddad704a3f98c0947e3c25a7c9608a13444d66d6c0409fdf39f3ad0a9c2ae8d28a77477d43e34c42258dde7e2b470b
SSDEEP

3072:ZG1lCHI/eNiun0VeDmpXyIzwivTzIH0RWYh97pnyza+8Tn0:UzTeH0VeDkXyIMuTzIHCWYL7liaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e9b14ea6ca2d549e3332594be5dfee7_JaffaCakes118

Files

8e9b14ea6ca2d549e3332594be5dfee7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\ami\Desktop\SirHooks\trunk\sirhooks\obj\x86\Release\sirhooks by Clinton and Warlax.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ