85cf02588f3e68115b81f31e275728fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85cf02588f3e68115b81f31e275728fd_JaffaCakes118
Size

2.3MB
MD5

85cf02588f3e68115b81f31e275728fd
SHA1

72978b3770a4eb2e13ab2a0995dd1a114272e588
SHA256

d16907eaffb03133c06a330444250d0493fca3e06dc27f8e76bc9d137bfa778b
SHA512

cbe45895d136b18948263fa9a06b25f3ec04a5676bf8aa3c6409f7fed352c480544604a2472ad411ac2f1cf42a0b636e718b9c9e5ded49975be8d813dfbe3ba1
SSDEEP

49152:qkiW+rf0lWyv6rraTQ6JLCCV9jv0Gv4YZLPlqX+deeNQlvw+MUeT2:3G4lWyv6rmQ+/jv0Gv4mPlqXAeeNQlic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85cf02588f3e68115b81f31e275728fd_JaffaCakes118

Files

85cf02588f3e68115b81f31e275728fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ