85314d001cb3bb4ee7fca4d09d8694bd_JaffaCakes118 | Triage

Sharing

General

Target

85314d001cb3bb4ee7fca4d09d8694bd_JaffaCakes118
Size

553KB
MD5

85314d001cb3bb4ee7fca4d09d8694bd
SHA1

5a36a29fe97aa72f97e384fadc1fec4d2e539e79
SHA256

91ac623cc2d9de9600cf9c35e12a9c3bac13df18b43ef72e7c89c914c3846a11
SHA512

826b8b76c075bdfc98d750f61a07bd46384c52538854304fdbb35c95fd75ec26472adb9e176a52b69d923651986b6e0f2b76900954172daa153f0d81126d45dd
SSDEEP

12288:iKPf6zZfTGpHdK3M1nAauJ846ZbdGUo5GU:ihz5TGddj1n5kuZbg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85314d001cb3bb4ee7fca4d09d8694bd_JaffaCakes118

Files

85314d001cb3bb4ee7fca4d09d8694bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\user\Documents\Visual Studio 2010\Projects\BloodDDOS\BloodDDOS\obj\x86\Debug\BloodDDOS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ