85b25f0935ab2b5db6025b4a4d277480_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b25f0935ab2b5db6025b4a4d277480_JaffaCakes118
Size

90KB
MD5

85b25f0935ab2b5db6025b4a4d277480
SHA1

04c4aefc0a752cd79383f8706f4052b7177ff301
SHA256

d8a6f3b12a12a7b686c15f03c3d15357cb626c26764134d7c914e668c0b0d495
SHA512

7b83753f57bec411eb5ad1aea5c1666a4ab477bd421080e82333c6477495c7f5f1536acfb5cdd9dd8285c8c3d99321af8ae42edb159b53783cab4094d0136332
SSDEEP

1536:kpjGijKvRtALkl5LZSGrbVhw/tBm1fgOkW6QrSUFW+y:F9dLZSGrnUtk9XkW5rD0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b25f0935ab2b5db6025b4a4d277480_JaffaCakes118

Files

85b25f0935ab2b5db6025b4a4d277480_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ