cf43f3906eb00b811d030d66bc145ad5_JaffaCakes118 | Triage

Sharing

General

Target

cf43f3906eb00b811d030d66bc145ad5_JaffaCakes118
Size

34KB
MD5

cf43f3906eb00b811d030d66bc145ad5
SHA1

a5830a08ed386bdf5e585a7b069df7cd847b0630
SHA256

4bf326fcf715e04d4f36e710771ec3f7c2356ca27a5386c166f366cac869a119
SHA512

b2488c26062e1cca0c1e54a6f85c64e0226256f8d6027ba37a0bf7f6c7de487486a85bbe2fbdb29776d0d1c35569b04c6e35923ac5599a52a26f5e8bf000b343
SSDEEP

768:Xh7VuF7NsGLtmeFA2XPADP+ags6uoahz:XhZqBAN2fAj+1EJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf43f3906eb00b811d030d66bc145ad5_JaffaCakes118

Files

cf43f3906eb00b811d030d66bc145ad5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\USER\Desktop\timiostimio Injector 1.0\timiostimio Injector 1.0\obj\x86\Debug\timiostimio Injector 1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ