d9cbcf85b5895134bf0f9143b4150f93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9cbcf85b5895134bf0f9143b4150f93_JaffaCakes118
Size

1.2MB
MD5

d9cbcf85b5895134bf0f9143b4150f93
SHA1

02cfb57400108e33a550c4df3f0654fac745149d
SHA256

0f9a63397eeaeb1b0027fd803dc7a4714bb1bc11e5fe1d4e37be301a1a9eceaa
SHA512

fbc57b66d3178211a3370dad60ec337b15196c0d60a10ce38288c7973d10603d773cf93ea7babcaba0d7c655d9479e9e43a705a956466a64d9409933340820a1
SSDEEP

24576:AKknektCqC5JkEi9N+Sr5XPMouWmAOpuEL+kSSY:vkk4Fr5fgY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9cbcf85b5895134bf0f9143b4150f93_JaffaCakes118

Files

d9cbcf85b5895134bf0f9143b4150f93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 120KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE