ff28014a6781bb14c2ef0ce485a8878b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff28014a6781bb14c2ef0ce485a8878b_JaffaCakes118
Size

385KB
MD5

ff28014a6781bb14c2ef0ce485a8878b
SHA1

15d6e541643390776a9240b05cfe91220f6be1ff
SHA256

8c8c39a4f93e65d5f964487346b633b6cc074bab048a3b8e8e0d1aff5e9d3f41
SHA512

aafdd1756568e36dc9a266bd720f19decda7e2b150d51dd3c26233f45722048597cec60af18c5c9cc4f31a3e58defdac3657697339883f91d47109ee377c3953
SSDEEP

6144:gvV/R4NFIO15zNJxE01hzVVRSoekOCcVVhCNUn8B6MIeqp9tkwk/BUaMq4SB:gIWKzNQ0zRVRSoROCMaNUnBgqp95afB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff28014a6781bb14c2ef0ce485a8878b_JaffaCakes118

Files

ff28014a6781bb14c2ef0ce485a8878b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ