574f76183d421c4740446f37d08514a5_JaffaCakes118 | Triage

Sharing

General

Target

574f76183d421c4740446f37d08514a5_JaffaCakes118
Size

215KB
MD5

574f76183d421c4740446f37d08514a5
SHA1

aa71776b588f81914adfed88653c29fdfc927cfb
SHA256

738f603c510c5d4d6b78de664140b55c132a408bb096fc7a1b75e134e42724bc
SHA512

981353ed8cc2b6dd7450216ae516ce7e5258f53a87a05237326943dcb53e4c7bbbb0c303b1d7d305aac3ab3b0f1b860553a8cbd8a3a7a3ee874c93269efc30af
SSDEEP

6144:letk+TtRQ48wVLTRcNR1UDIMbHyh0yIfGA8nvPGHDa:Ck+TtRMacNR1qyh0Hf0v8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574f76183d421c4740446f37d08514a5_JaffaCakes118

Files

574f76183d421c4740446f37d08514a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\N4n033\Documents\Visual Studio 2008\Projects\Hacker-WarRock VIP Injector\Hacker-WarRock VIP Injector\obj\Debug\Hacker-WarRock Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ