ae833556d9a8b6c140112059f5e0988e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae833556d9a8b6c140112059f5e0988e_JaffaCakes118
Size

89KB
MD5

ae833556d9a8b6c140112059f5e0988e
SHA1

dc09425af32da5059541ec6fdca90e15808a0927
SHA256

c29c20479d49449f1e9dede7040a7669ac333df29c094f4cec7ea067e9aae95b
SHA512

d5fec4c3519f0273382c5c8061597ce24d389ae9b196b0e7106fc4d557ef4e0509f41e2e323807e6552115195c9897926b74ece9bc57b32dc9fed547d12c5665
SSDEEP

1536:rTF9+bRNW9tfMT/amYW+tLBYDe4KNsXiTF9+bRNW9tfMT/am:Pai9tE/FYTtLB87jX+ai9tE/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae833556d9a8b6c140112059f5e0988e_JaffaCakes118

Files

ae833556d9a8b6c140112059f5e0988e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Unc3nZureD\Asztal\AutoIT 3 Scriptek - Source CodeZ\WarningInject\WarningInject\obj\Debug\WarningInject.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ