96ee1ca7e1008253c0bee6b062b487e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96ee1ca7e1008253c0bee6b062b487e0_JaffaCakes118
Size

6.4MB
MD5

96ee1ca7e1008253c0bee6b062b487e0
SHA1

a018ae32ab2f69c52a5291a10f184763b94a5b17
SHA256

f48a36788b82e8252b95d1fbaa900b172777e9c629d8dccb434038c55ff02e08
SHA512

b531a9e37f9d32054e6748c9d339f92ba0402bd5163c40d0a7bbbb013291d66b95e700a254569fd0610f01c8b0110b999f3e1863d7cceccc70e2cb00a206e440
SSDEEP

98304:p33yKMaL/eXV1i/kDxkmcL/eXV1i/kaRWYL/eXV1i/kmeM1qj4iwiANvSo2/CAyj:dyKnZrrLGA3PhsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96ee1ca7e1008253c0bee6b062b487e0_JaffaCakes118

Files

96ee1ca7e1008253c0bee6b062b487e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ