970acaae5f05138ea555e66aa317e9b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

970acaae5f05138ea555e66aa317e9b5_JaffaCakes118
Size

418KB
MD5

970acaae5f05138ea555e66aa317e9b5
SHA1

83a7cb88338526dcfff69b712ffe70d90a4ebb4d
SHA256

260cc752f9acd223f44b7f02b2f1953e2ee4ddfea51edc3c8649677611569090
SHA512

a7e317308c83165b9e00b56063ff965954c41f045f20aa218c6b961c73495bb79bad1cb64ad9dac92be5e21aac5eeb931f4f6e5c58eedf3ad4b0eb2b5720c32f
SSDEEP

3072:JcvT1pVLSdbx9QoJ5oerTD+G4uM0iiffEfS7BttO0:JcvTfVLSL9QorNTD+GriiffEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970acaae5f05138ea555e66aa317e9b5_JaffaCakes118

Files

970acaae5f05138ea555e66aa317e9b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Nosotros\Desktop\Trainer Generator By dns\Generated Visual Basic Trainer Code\Dns web 2.3\WindowsApplication4\WindowsApplication4\obj\Release\Dn Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 219B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ