94509ed7a6c61280adb1f8eee0cb2d65_JaffaCakes118 | Triage

Sharing

General

Target

94509ed7a6c61280adb1f8eee0cb2d65_JaffaCakes118
Size

463KB
MD5

94509ed7a6c61280adb1f8eee0cb2d65
SHA1

ab6ea36ec9836590dcd07344cf41c9f9195eee97
SHA256

29e205a96c6ca059a67402e8a44d4eac5eb1089d2d056fe4d8f9ea11e7aaa937
SHA512

d91cf3f5d8c1f9ef163350971f29c531b3c30f2df4f9c15e2e743e5d82d34b78b459fb50f5e4f3284eddcc693099bf34848e57bc9fc2207adc1476d0698be594
SSDEEP

12288:t3LusLlCnc2c7ZgShIqFIgYwSwhtVnD+vXGr1QX/i:PLlCnnc7ZgCFdSwbkXGr1QX/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94509ed7a6c61280adb1f8eee0cb2d65_JaffaCakes118

Files

94509ed7a6c61280adb1f8eee0cb2d65_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ