c96a9e3d8d1984cbdbcc208a8f65de0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96a9e3d8d1984cbdbcc208a8f65de0c_JaffaCakes118
Size

1.6MB
MD5

c96a9e3d8d1984cbdbcc208a8f65de0c
SHA1

c8a3e9dd8dcd23abe16bc6455241f6b598208e78
SHA256

5e0c529a5ded9802307428d4c18b84ad36f674e36e050dd515d554af981010e7
SHA512

23a77a13c68b11bd640feec8bb08894c0f82b43f039c0e0527f02180df8b541ec0a9f136581d7797e2242b0226281f096f063bbe583f53a508696d68421726d2
SSDEEP

24576:GZW5YfT7O13DLlSWtemRxOWgLnANW2IXf6owzFUkxB6vFR/4BZFMGyO0sL:GFfT7OpVFemRxCnqHICowJNx6SZ0sL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c96a9e3d8d1984cbdbcc208a8f65de0c_JaffaCakes118

Files

c96a9e3d8d1984cbdbcc208a8f65de0c_JaffaCakes118
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ