0fdbc08a062aa46957f205927ea9bb1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fdbc08a062aa46957f205927ea9bb1c_JaffaCakes118
Size

104KB
MD5

0fdbc08a062aa46957f205927ea9bb1c
SHA1

615283d26e0c8d79d1eed28fb6db1ae9c0bfe8ee
SHA256

e08e223c39ce6e62fec5a45ae4f97c655227c640c8cbe41e069a1bb508d1a9e1
SHA512

298f5111c66c231cb319e55e295a68298a44bddf3d7d007c7193cc35651e307af348edd9959ddd9dcf9fd363ae1849f5066820c46689a8581878724c81a5f6cd
SSDEEP

1536:Ld/fYkTYk+u8H0nMjdnC4Zq1x2fwMOmG5:J/fJTJN21q1x2obmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fdbc08a062aa46957f205927ea9bb1c_JaffaCakes118

Files

0fdbc08a062aa46957f205927ea9bb1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Visual Studio 2010\Projects\[MH]Injector\[MH]Injector\obj\x86\Debug\[MH]Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ