abf5fda44ef8e06ec2e85e85f07ca0ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf5fda44ef8e06ec2e85e85f07ca0ff_JaffaCakes118
Size

871KB
MD5

abf5fda44ef8e06ec2e85e85f07ca0ff
SHA1

49c6fcddea519e13b82e402a074f59e1ef084b52
SHA256

c26e0d99e580ed85d91790e564490737163190b44ac5e935446661f53703fc5e
SHA512

bf06a4800977b793caa8e168ba8604e2bd9590aa10941614c9c57ebac2cb4535cb81c01a6925e9afaa86592cf6800dcb5e79ee86060431e9ccd2526f6fa2ca4d
SSDEEP

12288:/1u1vYt5yuynededl1uyYtUYmuc9p48iD:7W6yYY9KR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf5fda44ef8e06ec2e85e85f07ca0ff_JaffaCakes118

Files

abf5fda44ef8e06ec2e85e85f07ca0ff_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Rhoma Anjani™\Desktop\My Project\PointBlank Injection\obj\x86\Debug\Injector PB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 486KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ