d9fd6ae372365d006f1f411aa10a317a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9fd6ae372365d006f1f411aa10a317a_JaffaCakes118
Size

119KB
MD5

d9fd6ae372365d006f1f411aa10a317a
SHA1

4b0cd9bc9a76de253f100b580907e7532333d294
SHA256

24b930c80304da4281f8dbe8e4d193e71e581f72e8ec6015e193dfe65e02815d
SHA512

bb9f8ccdadbbb1d7b223952c3ff340654aecab713a7a8f585cd5c689804f92839206262117a636851be9af614e49b53a8ad772f69c4b18bd197cc637085c6ad8
SSDEEP

3072:h/3j88Pu4Q4EJi159HKYBgSXZRUay8kd4arBER:h76m1mYBppKaJkd4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9fd6ae372365d006f1f411aa10a317a_JaffaCakes118

Files

d9fd6ae372365d006f1f411aa10a317a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Richter\Documents\Visual Studio 2008\Projects\Injector\Injector\obj\Debug\Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ