8896c312eeab56b79933e6bc977ea78b_JaffaCakes118 | Triage

Sharing

General

Target

8896c312eeab56b79933e6bc977ea78b_JaffaCakes118
Size

368KB
MD5

8896c312eeab56b79933e6bc977ea78b
SHA1

93e140f1aba8ae32abeb238933a790c0c263c7f2
SHA256

4c9580ec8f234483ffe7901e92609cc39ffde78751017f4d4921c405bd385a40
SHA512

0cc0b2fd2ce4d96dbb7404a856eaf281acac90f6f17e236813e02bea8a4831d82373c094facfb3c625a1e0e0900e1c99b644ec4cbdb61fe9cca5684189f5e1c6
SSDEEP

6144:RTAp4naqm5GR/0N4Ftn6vicI8qtQQenKDFujBeqSDgzB8jk38:R041m5Q/0N4L9xYus1NSD2Cg38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8896c312eeab56b79933e6bc977ea78b_JaffaCakes118

Files

8896c312eeab56b79933e6bc977ea78b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ