87015f71c3d8dee9ef2d5084b3a53f39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87015f71c3d8dee9ef2d5084b3a53f39_JaffaCakes118
Size

50KB
MD5

87015f71c3d8dee9ef2d5084b3a53f39
SHA1

20772e1a8cd76e3e6d0e1b2a78a5037236b0d738
SHA256

d2c219b2e4675eda0c5bc64aaaa916d91ca8f921fb5bda5e1b3ba384daf48c08
SHA512

98dac8eaa2d4fff2eda0d2a3e8b63a7953b40a2b0af79d9b61bea92b9423278d55ef8d1e94a2b65f49982db923f36dab51c573ec58d876740d8d82d29ea6f033
SSDEEP

768:E/O97q8vKY+FJhTbfiwqitHT7rGBUGGGGuUCU3TFBTVRtlMC:E58yYwJwwqit/r63m3TFBpzJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87015f71c3d8dee9ef2d5084b3a53f39_JaffaCakes118

Files

87015f71c3d8dee9ef2d5084b3a53f39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jake\AppData\Local\Temporary Projects\RSSTAKEDDOSER\obj\x86\Release\RSSTAKEDDOSER.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ