70d11a299237d5f7712e76b81b738a50_JaffaCakes118 | Triage

Sharing

General

Target

70d11a299237d5f7712e76b81b738a50_JaffaCakes118
Size

2.0MB
MD5

70d11a299237d5f7712e76b81b738a50
SHA1

3d25d742614ca7bcc0f3e7f4b180c11daa7e132b
SHA256

af70d617608e0f724ad6c91f2962f392601656be64ced0af3a19a36f6ed9fe32
SHA512

e7a6ce81d7994a545c12d9b37f0cfaf7d79d96127c8df269425873fd302845bb37c1e4baaaeccdc46a3116f80429b90664cd35f6d0c848399aa274410ea9ca50
SSDEEP

49152:QkQTADCgrqlDzOxfkpOWPWzuEl01K20mJXZ2VxesQD:QaTIWSbPOuElB20mDIesQD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70d11a299237d5f7712e76b81b738a50_JaffaCakes118

Files

70d11a299237d5f7712e76b81b738a50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 983KB - Virtual size: 982KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 696KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE