c94e902a395b0b7173bb595ccbadb6bf_JaffaCakes118 | Triage

Sharing

General

Target

c94e902a395b0b7173bb595ccbadb6bf_JaffaCakes118
Size

852KB
MD5

c94e902a395b0b7173bb595ccbadb6bf
SHA1

2ba9626f8c6ca6bfd263227a2608d8d208daaa94
SHA256

2bd3c8d10fa922cece1a17e8231797222acdf126da8a9ed8feda6c9a407c80b0
SHA512

09974cfd8cb5e96a4640084bc9c15a100c0d05b558b525c69ad0a4836cb7783c9995cba0e9aec3408373bb0b0f6c461cc2ca34c170cfea2af181cc068fe608cb
SSDEEP

24576:RDLxJsRCVaMMWdnQW9JVcJOxJwg/cqvCxQfE1X:RDLxJmMMa7cJ29UQc1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c94e902a395b0b7173bb595ccbadb6bf_JaffaCakes118

Files

c94e902a395b0b7173bb595ccbadb6bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 4080.0MB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ