c93fcd9ac78b5610df0998d982fb7744_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c93fcd9ac78b5610df0998d982fb7744_JaffaCakes118
Size

959KB
MD5

c93fcd9ac78b5610df0998d982fb7744
SHA1

1ca83285f74d8b7bab6327bdb266f502de6b36cc
SHA256

956efc18ebb3bcc643832e8dc3105bbec621b23407e45578fb5eb974f1c7854d
SHA512

aa9844f332da63c649e40f1c1182d951e1398a70417d2a5f5ab202f2dbdfb74dfdd2f426d00f86b65423b649c8146c2331e4a687491e527736da289cb05f5d88
SSDEEP

24576:XD5bII5yKKt+/yHD74OuyMHSI6SceDD3cbLfZJDrxi:Xt3wR7JuycpYd3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c93fcd9ac78b5610df0998d982fb7744_JaffaCakes118

Files

c93fcd9ac78b5610df0998d982fb7744_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 562KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ