ff194f6909e6ddb71abf5e0649ad007e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff194f6909e6ddb71abf5e0649ad007e_JaffaCakes118
Size

771KB
MD5

ff194f6909e6ddb71abf5e0649ad007e
SHA1

eb921cc5d7c8a6a6983b5b273795cb822e516f96
SHA256

33cd626b8243ea650fa32129990f2ad0c2fb7a80bc53f9deba8ef8665da4eb82
SHA512

2e785f2cfd9bad54c1b2eaea11ed779658fedbe88e76ff38d98a49fbd880dd18966cb814da20cb80c3eeb988a71a9235acb8184ed98b44e7a306848346f9efd4
SSDEEP

12288:gmh/0zvbhXOgP2y+b6CXqRSLptO1K9jqb10VHmDXTuFaa2AtyGTKOF25ZoJJyhRY:GvB9ab6MjowWb10hJaothZ2/T6FBBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff194f6909e6ddb71abf5e0649ad007e_JaffaCakes118

Files

ff194f6909e6ddb71abf5e0649ad007e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ