68d5a5c68979ea9f876b4bc70e09f208_JaffaCakes118 | Triage

Sharing

General

Target

68d5a5c68979ea9f876b4bc70e09f208_JaffaCakes118
Size

532KB
MD5

68d5a5c68979ea9f876b4bc70e09f208
SHA1

fdd8c282341e4b3eed507b6d5b6a4d9f5bff822b
SHA256

9becb9245b96e28de6c81e88e97baebaf22bceb5e1e11888cbc05e240cdc4416
SHA512

bbd78b33827c07efb45e177be3af968dab85ae5a05a020eb69244db465e10b66a2cd3ee68a678137926e82efaed2fd407639cbfac41ee065f640a1bb2d5ba9cd
SSDEEP

12288:RkySnIOM615WmA8OlDpLTwl5WZNGQ5vHp+UR3:RgnILm5WmA3lDpLTwlAZNGIHp+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d5a5c68979ea9f876b4bc70e09f208_JaffaCakes118

Files

68d5a5c68979ea9f876b4bc70e09f208_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 100KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 380KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE