8e8a6575c3987a11b62495742d5c8d28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e8a6575c3987a11b62495742d5c8d28_JaffaCakes118
Size

96KB
MD5

8e8a6575c3987a11b62495742d5c8d28
SHA1

57851037772ebc11fe4e3e9975861013d73cf4ed
SHA256

44fb990912414b1d4a05a478cadc83bda0115a67990406636a9a900090f97ed1
SHA512

a26cad5ac614660166ef4ad3ef11e74dbef08c6cc46714bd9d8a20328a0a6cd08fc0b916487139057fd80a8c2828439141e2c73ac006ea5f3acc34b3326fb4b6
SSDEEP

1536:Su+xys6HYOlPqlVbl1MumzaBCqaKVyIx9H61x:Su+xyL4OlPql1MbIvVyE9Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e8a6575c3987a11b62495742d5c8d28_JaffaCakes118

Files

8e8a6575c3987a11b62495742d5c8d28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\TOXiC\ARCHELAUS Stub_New_NEW\ARCHELAUS Stub\obj\Release\Archelaus Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ