b85968508490fa842f7d4c48857358d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b85968508490fa842f7d4c48857358d8_JaffaCakes118
Size

416KB
MD5

b85968508490fa842f7d4c48857358d8
SHA1

0d36314d67be84a3419ff9dfbca2f3f9c85838d6
SHA256

6facb5ab8190ed9699e7348f02c70f283b6faa8ad9a8a09526b4e26c4239ae7d
SHA512

86b2d8206bdf8c5605979253633ae58d7efc9fc2e57862ed5a8f6c335ce80395ea4845c00b19cfc1eecb065a0d608a8c065cd1f062e0d91433a8525a7de33198
SSDEEP

6144:ES7WTcb6NHGyN0Lb5eGpE5vivut+qxQPhe/+Wuk+0d+i:EfcGNmyN0Lb5vE5VtbUWB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b85968508490fa842f7d4c48857358d8_JaffaCakes118

Files

b85968508490fa842f7d4c48857358d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ