fd85f3b244b167a869c319606021813b_JaffaCakes118 | Triage

Sharing

General

Target

fd85f3b244b167a869c319606021813b_JaffaCakes118
Size

724KB
MD5

fd85f3b244b167a869c319606021813b
SHA1

c63ec7aff4217dc99a19c47517e7bd7fdb13b787
SHA256

8039db102cebe6ca2c438e477551850644994553021fdfcefde85f8217bd46a4
SHA512

f99d558b4c081aee81187847ed411d7dca6e3dde4432c6c4b4ba5a9f7660a30b7712d015f8a653aeb1464cffef55a4d4bc0130a3f668df010edf01e5b40ccc6b
SSDEEP

12288:V7VPFqnFVrohSHXIxxDSMYpEVPFrnQVrQhSMXIxxISMYph:JM4MXInSIvZDXIsSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd85f3b244b167a869c319606021813b_JaffaCakes118

Files

fd85f3b244b167a869c319606021813b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Složky\Zaloha2017\Plocha\Flowsec\dxRAT\CIL\igfxrt\igfxrt\obj\Debug\igfxrt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 721KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ