df614ca98bc74fad3ea7d86a5f1229f9_JaffaCakes118 | Triage

Sharing

General

Target

df614ca98bc74fad3ea7d86a5f1229f9_JaffaCakes118
Size

83KB
MD5

df614ca98bc74fad3ea7d86a5f1229f9
SHA1

d9158dffb41d6f011f6a5d53ed10e9638c64cd08
SHA256

596522554e73f37b5c00c4622d50811692b73c1dc038f3547aec11143d80dbad
SHA512

38d1a0d2ed9293ce73c37bdd727a955a9db7ac1f81726d06ca2d60fec5a91fad81db83b5b8fd6b6740288f6da355e482ce95922f0a4541d1121c35e7040eaa58
SSDEEP

1536:3dV7XBZN6jVB2TsN1pENr6ALN7GMKwI5hcXjGdWtvuMnBQvl3sRBv7KgOrH1KXj:tpXojVBms1ouALNIDzd8kl3oBjKgOrH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df614ca98bc74fad3ea7d86a5f1229f9_JaffaCakes118

Files

df614ca98bc74fad3ea7d86a5f1229f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Conny\Documents\Visual Studio 2008\Projects\b00bs Injector by Oreagel\b00bs Injector by Oreagel\obj\Debug\b00bs Injector by Oreagel.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ