96ebfb88c68c35657724978aa7a273a9_JaffaCakes118 | Triage

Sharing

General

Target

96ebfb88c68c35657724978aa7a273a9_JaffaCakes118
Size

115KB
MD5

96ebfb88c68c35657724978aa7a273a9
SHA1

8113eff5290c781c20834104430f4fe3b2b89785
SHA256

ac7f705c0432240454bcd355ae71feba584ce971dc0ef5c5ab09739ac1d50f0f
SHA512

bfa7c8abecb6a63a02c30172f46c4411dd4e277d754e18c70fa9add91c1cd40242485aac7e04fbcd515563f84fb15a69637591fe7fac9295937da6bb5b7b685a
SSDEEP

3072:aYtCrPm6HjxQhoccrw0X/Oh54p8l7jXQ0edUDKFfgD7iR9:L+fCOLX/ObhslUuFfgD2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96ebfb88c68c35657724978aa7a273a9_JaffaCakes118

Files

96ebfb88c68c35657724978aa7a273a9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE