85107468788a498f084fbf66d8eaff79_JaffaCakes118 | Triage

Sharing

General

Target

85107468788a498f084fbf66d8eaff79_JaffaCakes118
Size

315KB
MD5

85107468788a498f084fbf66d8eaff79
SHA1

99ed3a960c5ed9509c8ad5260a50ca25e9f88a34
SHA256

05ddb97ebebf3a4b41bf3d091cb38184a25a358739ac1f7e7058f6711aaf16e8
SHA512

e1cd0fa47605f1b4dd6d2110cb9b498f35be950b7e5f2274c953d1d3faa239a1683398bf16ac10dcfd1f4a1c561a8bd866c1ea8c0304232f4add1991969da896
SSDEEP

6144:Hq3gCnloqWYHtSeYnI+tnYDcMbY4FmNzNwm+MhUa9xO1BcC1cnZ:Hq3rz1NQnI+1Kb5KzNVNaPcnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85107468788a498f084fbf66d8eaff79_JaffaCakes118

Files

85107468788a498f084fbf66d8eaff79_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE