ba13d55b95440503473cfe84c274aeb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba13d55b95440503473cfe84c274aeb5_JaffaCakes118
Size

590KB
MD5

ba13d55b95440503473cfe84c274aeb5
SHA1

78b17c2499ae6a8f1f23c72ca31f1a2c42d5112f
SHA256

4f1495ec5a10fe8ec61d226e55dd966cd00086308b637d2fcc1bbb4bbe978eae
SHA512

1baab733ab5a3340efe538e1ac904b08f65ff4d0d47ea1c571a9bd856a1382609df7e00ad1ac68004bd749923ea0bd67713c72779c66a20c93d701294c54542d
SSDEEP

6144:FHtivoYzSZ/q8zVqhxOVsGbFBTfDjLeHtivoYzSZ/q8zVqhxOVsGbFBTfDj:Do84hZCFBfDMo84hZCFBfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba13d55b95440503473cfe84c274aeb5_JaffaCakes118

Files

ba13d55b95440503473cfe84c274aeb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Crossfire\AppData\Local\Temporary Projects\BryanVB Advanced Injector\obj\Debug\BryanVB Advanced Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ