81c9d1eff622aafdbef5f1e4eb0115c4_JaffaCakes118 | Triage

Sharing

General

Target

81c9d1eff622aafdbef5f1e4eb0115c4_JaffaCakes118
Size

187KB
MD5

81c9d1eff622aafdbef5f1e4eb0115c4
SHA1

8e71bd0982c9d4755ed25948b2788a5e8ed0bd7e
SHA256

ab5f34b5931b6544be86f9f09b7d4028e4089a0a9d743f74c20005e55ae5eacc
SHA512

8d030ba9cb034a1842808e50d2497eb85aed454c03c288faa69160e4db87bde4fd0de7f7d35f5a2659139ee45e8de12eda8647b89097724370b5173585dc4803
SSDEEP

3072:2AxYc7UHy7h2cOdC5+lrZH8CRpIm2XYdSqJ2gRXX7UAe1vKQfZR9sVSKCXM55EHP:27sYyV2ce7JZcCnE2SqJ2CXXwtJjNSSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c9d1eff622aafdbef5f1e4eb0115c4_JaffaCakes118

Files

81c9d1eff622aafdbef5f1e4eb0115c4_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cidaemon.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE