ff1d74f926270a395cb6a8a69b4ab15a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1d74f926270a395cb6a8a69b4ab15a_JaffaCakes118
Size

21KB
MD5

ff1d74f926270a395cb6a8a69b4ab15a
SHA1

2561d6c684608e7dbfd49b72c8998088ea648d32
SHA256

dfa7265033310b5bd50cc7c24589ffeb5072a898d19cc4da5f8b19b2c489826d
SHA512

0b4b35c844b59f4ddea87a77b5e9f4ad5d3da4f694e446c54892326a2d2e3d8629562c5d89a536b8ad5654b5cae4147decf045a06315a28868d583a61dda80b5
SSDEEP

384:EfGevkgnL4yaU8lTX8AffxamoC0uGlRa8Ovbdh:EfTGTXJcmoC1GlU8OJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1d74f926270a395cb6a8a69b4ab15a_JaffaCakes118

Files

ff1d74f926270a395cb6a8a69b4ab15a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 989B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ