ff33b79bfa68fd608e962e08928974ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff33b79bfa68fd608e962e08928974ac_JaffaCakes118
Size

1.8MB
MD5

ff33b79bfa68fd608e962e08928974ac
SHA1

ba3f15a52beaa12be1e6600e4df5383d2498473b
SHA256

31c3d2bd9780229f59dc8fbfcf7f28dc962d0fb41124f03165e6055c26a5ec90
SHA512

05cee01564abf5d1c2a5740f5d7ad03e14532d50f8b50d11af922b67082c6f8155e40c5fa49bb131937f495281355d509f02f214a9b2661ed2d9604472e7c1a0
SSDEEP

24576:Ta/MMpOCmDtaLg/DRZhf0deU/N9M+ugdM4WC6wK3Mu2E9LOA7wnNTBxaewsAjdL0:TCvjmDta4PwnNTBsljdLfUbN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff33b79bfa68fd608e962e08928974ac_JaffaCakes118

Files

ff33b79bfa68fd608e962e08928974ac_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ