83b0e44c29d354df6bd0542a669946d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83b0e44c29d354df6bd0542a669946d7_JaffaCakes118
Size

28KB
MD5

83b0e44c29d354df6bd0542a669946d7
SHA1

2e780b60ef14635dfb864bfef9c624410015bad8
SHA256

8582f2af9c28a3762ddd35e352441b08e540e087484f0ab14783af529c6d49d2
SHA512

dda9b5e63313beac497ccbc496379c20690e52d2eac2ada34ae27d31c4206a5039975501397df87f18fcb0de6bce3cca82d4a8e8f5708a06b2c409bd519508c7
SSDEEP

384:kRlehrzIk1cbtC+qmGnR4bAdcOrULk245Y4QKvX3HqTRkr3FU4d1EcWMZCzYcHeL:kzel8k+A+qm84U/YNkTFU4tIzYcHeImR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83b0e44c29d354df6bd0542a669946d7_JaffaCakes118

Files

83b0e44c29d354df6bd0542a669946d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Zach\Desktop\Reflect Logger\ReflectLoggerStub\RLS\RLS\obj\x86\Debug\RLS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ