96db6ff28d186753175c63749ec1fb60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96db6ff28d186753175c63749ec1fb60_JaffaCakes118
Size

283KB
MD5

96db6ff28d186753175c63749ec1fb60
SHA1

c4971ab312dc44993a0ac2821f96b9d96c26f280
SHA256

e6f0d0a492cac32277b7323dbd7a43c4ada94473386f41eab4228a1f058b0a75
SHA512

a15375e722ed17095437030c192e96648d5909751dbca31638d38511c617fedb60e7bef1acec2fc55af7dba5650b6b60043b9f16c42cc2a1e787c729479dd67b
SSDEEP

6144:p8P94RmWpwRDAXG8zTUP4oTGjg2PXU7l9yNBONrV1/:aP9ymKwRUCTGjg20lwBONrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96db6ff28d186753175c63749ec1fb60_JaffaCakes118

Files

96db6ff28d186753175c63749ec1fb60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.icode
Size: 3KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: 274KB - Virtual size: 276KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE