85dd53e0d1bc55613e0ccb5d9bb9b40c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85dd53e0d1bc55613e0ccb5d9bb9b40c_JaffaCakes118
Size

192KB
MD5

85dd53e0d1bc55613e0ccb5d9bb9b40c
SHA1

e8dad83912e006c3240fb525996d18fa445897bd
SHA256

8e4d61ff8bcbd044492dcd63b470ff831829d90ba584c9c2d5f2390e4c26b78d
SHA512

c001cae96b5854d378f0a6524170202a0c0d899af073ab3f2a0c1b7d48a7c0f32c87167dbbe088d80d9f503ab74c5af124af41c44c637d0ecd79fb7357dde0a2
SSDEEP

3072:5D1ncG2w99xAubjWJLB4SImb9Ho0/0Qgy5s+8McYEnwQ1sm:5D1h99xj4B4SImb9Hos518n6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85dd53e0d1bc55613e0ccb5d9bb9b40c_JaffaCakes118

Files

85dd53e0d1bc55613e0ccb5d9bb9b40c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ