d7520c67504344b405376c3e4d5129f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7520c67504344b405376c3e4d5129f2_JaffaCakes118
Size

41KB
MD5

d7520c67504344b405376c3e4d5129f2
SHA1

7f9bb0102b17092f5a27bae125f84c7f15a1deec
SHA256

13a95cd436c3dc841403aad0574ddd216950200e827ec77a11a9441bc3028d20
SHA512

cedbda3570fd38f927b751e1d8bfde69b765b8a71cab2a582b6b9209e75e46735e47a0e1dba6b3c33c3c5c2bfc6864e6784e69c4213d2d1fd5b31b0f655724db
SSDEEP

384:zvP96uJrhkLLbbOBFwepofORlBeqz2UiYJ2WkA2xhj3tEYEiAxLk245AmhCXGa3w:VjweVzBeqSXe2vxL8lzoCXjbzpdjwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7520c67504344b405376c3e4d5129f2_JaffaCakes118

Files

d7520c67504344b405376c3e4d5129f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Pintar\Desktop\Visual Project\Crossfire Injector\Crossfire Injector\obj\x86\Debug\Crossfire Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ