8c9a94b63f0f7a5468eed1a2d729b5a2_JaffaCakes118 | Triage

Sharing

General

Target

8c9a94b63f0f7a5468eed1a2d729b5a2_JaffaCakes118
Size

313KB
MD5

8c9a94b63f0f7a5468eed1a2d729b5a2
SHA1

94f2c8f4c3a5dc7628d4d61311bcf1a6288a5386
SHA256

6d290434922aa468f7068a4426dbfa584d065a76cc8d76d60f3f7c79db793647
SHA512

499ba955c023ee248ab9c6aab9b70b5506b13bf57930f24bed306ab68ccc5363804be550d57b7281622c58be1b814275ee79a4d167723019660020583e8ea58e
SSDEEP

6144:SoKnaembZx9AwfeYc0gkF5Xf6QY/6cAAAQLh3++i2WgwX:9KQX9Z7XMD/nAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c9a94b63f0f7a5468eed1a2d729b5a2_JaffaCakes118

Files

8c9a94b63f0f7a5468eed1a2d729b5a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE