ff16ae042df12464a5c0fd962b9b4584_JaffaCakes118 | Triage

Sharing

General

Target

ff16ae042df12464a5c0fd962b9b4584_JaffaCakes118
Size

809KB
MD5

ff16ae042df12464a5c0fd962b9b4584
SHA1

9fb495425e0bcd016cb11cd790234b9c069824c1
SHA256

522807b9b56ee3dbad64df89600fc861d116f43fd0c2e78aeb39e19ac1bba642
SHA512

e2f0c81cbab2bc5e6f7897afe8ac617dcae7e3f1c99d75011505f62f41dfa4ff491da96217ffc47945cc03be1da59bb1a0cc7b92ef04fd531700ff11e9615406
SSDEEP

12288:gPX+pd167QhE0s7+jM+M6ugRfMMkIM7ovX+pd167QhE02Dd:0E6Ehg7mM+M6RkMkIM7gE6Ehc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff16ae042df12464a5c0fd962b9b4584_JaffaCakes118

Files

ff16ae042df12464a5c0fd962b9b4584_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ