ae9dc77051eb90d5ca72254d6ae10a33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae9dc77051eb90d5ca72254d6ae10a33_JaffaCakes118
Size

877KB
MD5

ae9dc77051eb90d5ca72254d6ae10a33
SHA1

90b8bf1d2a3675f677202d5a670c902f2c6ca745
SHA256

ad2ec6bfb4e3e8801e8a569c3de365b0c03d91c0d65f7932c8b136d940d6ea67
SHA512

afc88795d28979fa5516c9c5be7225470b04ccc4fc2edd386440f6de1bdb9c77a08bfa21ae9b05cf14d5a78bdb67b92cfdf0032a2834ccf672ad27b29d89cf0c
SSDEEP

12288:B4PB85oQfBHIxtxaybF8BaHd1XHijWZRQ3KIFzE44grfh:B4PB8CQ5HIxtxay1yKZRQ6IxE44ch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae9dc77051eb90d5ca72254d6ae10a33_JaffaCakes118

Files

ae9dc77051eb90d5ca72254d6ae10a33_JaffaCakes118
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 224KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE