ff14bf1152f47673e0611d1cbaad16f8_JaffaCakes118 | Triage

Sharing

General

Target

ff14bf1152f47673e0611d1cbaad16f8_JaffaCakes118
Size

1.2MB
MD5

ff14bf1152f47673e0611d1cbaad16f8
SHA1

d8cbd77e9d924542450a01cc21360901a6af52ac
SHA256

771c90e7d56a49f2076cd14babb7cbb4ce51fa81b09b8dfe3955c89104fc48f7
SHA512

d07b9d80bbc049961b9471464f504b82da2a3031fdfadd2df7d19188d83f4831caf3559b3dd98d8a78cca89acce013eadf0eac0dc0428415a67439de6dd35451
SSDEEP

24576:za8m7m5/OHKYW1oGY2lJlAUCpzSTKyU6VMkAa+5:3G92SUg4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff14bf1152f47673e0611d1cbaad16f8_JaffaCakes118

Files

ff14bf1152f47673e0611d1cbaad16f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 519KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ