ff040be48da708aab13bf1606681f3eb_JaffaCakes118 | Triage

Sharing

General

Target

ff040be48da708aab13bf1606681f3eb_JaffaCakes118
Size

259KB
MD5

ff040be48da708aab13bf1606681f3eb
SHA1

946adf0a93e48f012fa30827de7466741fef40e1
SHA256

db8b86add82655e7cf9e4fa7792182863ed8dd4b3ec672f51b02382eef04cbca
SHA512

a2d07121db95859ad32b9dd543eab05c3e52f366d4bb915c378b0c5f4e3fb5c8f09d4b73c7c0e3668aadf31cfeabe5f4726b7459081a9f85509d0871b389613e
SSDEEP

3072:mEXfQWrWYtoMpo1dqCeXqjf0ulHs4ikBuJ6yZuRGyF3yKABFvZrH73z6evNknUJw:hQIDqdK12s4gEB8rHX6euK2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff040be48da708aab13bf1606681f3eb_JaffaCakes118

Files

ff040be48da708aab13bf1606681f3eb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ