a8e24e957825dc3b914144149755cba2_JaffaCakes118 | Triage

Sharing

General

Target

a8e24e957825dc3b914144149755cba2_JaffaCakes118
Size

721KB
MD5

a8e24e957825dc3b914144149755cba2
SHA1

d461edfc115ee1efebbe65a61237a61ef878a4bb
SHA256

b0792dd3e8d3aac7efc9e178efd1e3e17c637df583694178474814afb24f660c
SHA512

bea9122236a1799bf1137ff3b6093e2ef906d4ad47c19aa60b67b1e0053fe0245cb2cdb8d37f664e14e6a5d149f08982a8b9e3c46a68b277752b6a1bdef6a4f3
SSDEEP

6144:OPV4bK0J0qGiScGJhjzTIN4Lb1lpX+iQoPV4bK0J0qGiScGJhjzTIN4Lb1lxI:khzTpkiQehzTpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8e24e957825dc3b914144149755cba2_JaffaCakes118

Files

a8e24e957825dc3b914144149755cba2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dan\documents\visual studio 2010\Projects\GEA-Injector\GEA-Injector\obj\x86\Debug\GEA-Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ