e08796c5c964fe20f32d2294f61d6fa2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e08796c5c964fe20f32d2294f61d6fa2_JaffaCakes118
Size

413KB
MD5

e08796c5c964fe20f32d2294f61d6fa2
SHA1

0a9a7f1d52145ec4ad3b7d1a6e3520e9ea7b099d
SHA256

0b062082afcbcdd068459efa26f89e644784bad68f5d73e09e58e52f17b9ea34
SHA512

166341996b4f939ef82869b0050120022a672558386544d4b09eb8fe744052411e204f3ef6458e4211f228eace78f79a78bde3809f74c2b9309d64c16c59b493
SSDEEP

12288:j4XcwBIxjC8sihhriutv0mcCbALhppTuotqAT:kXcAIxjI2tiudIXLRv1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e08796c5c964fe20f32d2294f61d6fa2_JaffaCakes118

Files

e08796c5c964fe20f32d2294f61d6fa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Brandon\workspace\Genius\Toolbars\v5\Genius_v5\Genius_v5\obj\Release\Genius.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ