085835acd102be8ae20f06e3bcd1c286_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085835acd102be8ae20f06e3bcd1c286_JaffaCakes118
Size

265KB
MD5

085835acd102be8ae20f06e3bcd1c286
SHA1

6b094f2758e3eb5de80694332c7c230cddd4d56c
SHA256

dfaef1fc73070ec9c9c82054c45852aed5bd3cbf3d05b1e5dc3e0da7d9c8bf60
SHA512

949609cab86dc8edb2188c95a10dc82db87eab8a61032e608b057adfe710d2dfc4d97f229930ad2650c520d44a5f3de68acdd3850bd10ca8dc37ef73c11cd5aa
SSDEEP

6144:xCOpqpmLKQFA+C+DLztBFUY+kzdCJe6Dcr5u:jpqprQo+3zNUYirAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085835acd102be8ae20f06e3bcd1c286_JaffaCakes118

Files

085835acd102be8ae20f06e3bcd1c286_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ