96d74a560c8d6583e4f75c6a13e5c5d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96d74a560c8d6583e4f75c6a13e5c5d8_JaffaCakes118
Size

1.1MB
MD5

96d74a560c8d6583e4f75c6a13e5c5d8
SHA1

9bda39abcd5c378e13c7957469453932f79891a4
SHA256

b26f214f9b1de2d02b12046280965ad6a8c14496dee906527eda64aa5e3b101a
SHA512

a7f68d34e4f4c518ab0999e47b45926b369c2052da1bcdd2b750bcb52cdafc7c2301586d1eb53907a3ce6e84b98707121f7c9992c5407e749482068b7751582b
SSDEEP

24576:ZVT0ljTX/TWJuHR9kntMbMWeHP5SLL74TYXpgC:ZJ0ljTX/TWJuHRmMIWcxSj4UXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d74a560c8d6583e4f75c6a13e5c5d8_JaffaCakes118

Files

96d74a560c8d6583e4f75c6a13e5c5d8_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 776KB - Virtual size: 775KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ