86de7514562f471d0ef90cbf20b15827_JaffaCakes118 | Triage

Sharing

General

Target

86de7514562f471d0ef90cbf20b15827_JaffaCakes118
Size

254KB
MD5

86de7514562f471d0ef90cbf20b15827
SHA1

19f7482b5dad8ac2a7967aee6658e100bf07dc12
SHA256

ca0911347e67ffa58db9ccb00f178ba0d904124631173973dd547f68593cbd90
SHA512

5701fc2a674ec74f18e31f518d9b0a2c064c37c1cd3ccb020c76b756f32c560d36ae567f79eb937e7539bc03aeb4d419270c873880eefc496fcd9f8a9584e752
SSDEEP

3072:BJazJIYo+Q8a5G/vMrka1SyLyrAbjYRliEC2adaFHFHAzlhBSPm56Bet:626a5G/v1a1vLyrlRli2JFlHAQe5mK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86de7514562f471d0ef90cbf20b15827_JaffaCakes118

Files

86de7514562f471d0ef90cbf20b15827_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kdglkrkjdfhslej\Documents\Visual Studio 2008\Projects\PRI\PRI\obj\Release\Cat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ