a9c264e113932467312bfd4d66f2540b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9c264e113932467312bfd4d66f2540b_JaffaCakes118
Size

94KB
MD5

a9c264e113932467312bfd4d66f2540b
SHA1

d1ba5183aa318746943b6a502bc0711ee4f46fba
SHA256

425ba2db261437d8d3fa44154b447c3a1d57846455161003185605a74309362f
SHA512

68b1f53eec8dcfe3760d284685f7273307e91f4a039ffb4abb0af67e31b1023ee88796db37038bc27b2d07ddd14a2f729978eebff8a61dd6a2d4270ee1e4aa31
SSDEEP

1536:NS2jaDGsJO/2OW6J7DFK4MtVxZ7XSFITpZE0EtFp6I:NXqGsJO/2OW6Jf04sV/XhTXNQUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9c264e113932467312bfd4d66f2540b_JaffaCakes118

Files

a9c264e113932467312bfd4d66f2540b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Callum\Documents\Visual Studio 2008\Projects\Injectamunkie\Injectamunkie\obj\x86\Release\Injectamunkie.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ