e9697e0f92341559d4583ea11a00ccd6_JaffaCakes118 | Triage

Sharing

General

Target

e9697e0f92341559d4583ea11a00ccd6_JaffaCakes118
Size

674KB
MD5

e9697e0f92341559d4583ea11a00ccd6
SHA1

fa2a98911bd37a586d31225c5a952d1c66b2feed
SHA256

2bdd84d0f8b35ba65759a3c3036d37b3b3e812e891b4b2dbbd6e632675af15fd
SHA512

c4a4e3b523d70ecd99014927445c189b0615a9e21ac294c7b95dfb4a5fae83ddb01b398017d8ed34a3d7739e28fede1e84b84478a9b98936026523f9b19ae6e2
SSDEEP

12288:n3TdtLW5WIj1YSSdFxxAiQBBSXyMzBUWb9lx/9AgHLo8OW+rBj:3Dsj1dEBTWBcJ9nPx/igrp+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9697e0f92341559d4583ea11a00ccd6_JaffaCakes118

Files

e9697e0f92341559d4583ea11a00ccd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

. rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE