10c094cbf34df7fcd16a3b222d58d1d8_JaffaCakes118 | Triage

Sharing

General

Target

10c094cbf34df7fcd16a3b222d58d1d8_JaffaCakes118
Size

659KB
MD5

10c094cbf34df7fcd16a3b222d58d1d8
SHA1

6892bd6d2dc518189a4bf7c0e573ed874272a24b
SHA256

d2fdd311ca541b6a64eab6f07bada32a1f95a07be34fc348981af4289f3e5b26
SHA512

6dfc1123f3deb0d688ff546251d88cb7b58b48965867c541c62e73495348068901b778bd4117ca6d77c53fb3bd732771dd009163bc884da34b5f312a1056fc7b
SSDEEP

12288:OwX+oR3PpYGLxe0DTcJEigQyQeZXiD0IpVfNwIcYK/b+UvN3jRDfMCJAi:OwbR3Ppnx7DCEPQWXiQIDfN8HD+UltD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10c094cbf34df7fcd16a3b222d58d1d8_JaffaCakes118

Files

10c094cbf34df7fcd16a3b222d58d1d8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 649KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 348B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ