8a95a1d0029d9c085f2f54d200f5525f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a95a1d0029d9c085f2f54d200f5525f_JaffaCakes118
Size

202KB
MD5

8a95a1d0029d9c085f2f54d200f5525f
SHA1

f95f9d47756483ec31f4e576cf315cfd06b85249
SHA256

df14f4788098e82d5af6a75ce7989f9ea62572315378567cfe2803f3a6989852
SHA512

dc4a0b3c88dcf381dfdcf74c1d8d3c4b1a62cf3c20897d83c8a124d6aa45e875aecbf8b4c518051bd69a95f299121d2e1bd768f9b18299f6914c286f841cdbd7
SSDEEP

3072:uanN//DCT8QIBtt+1isz5UOt9fXiSzsMuDpQBJdSTeLeIg8SNoqHoRN38QwHUkhP:q71NzWWfXFsMLBTSTeG8S2WhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a95a1d0029d9c085f2f54d200f5525f_JaffaCakes118

Files

8a95a1d0029d9c085f2f54d200f5525f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\IbRahIM\Desktop\zbe.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ