ff362014ccfee6f4eafc0084c2caeaf3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff362014ccfee6f4eafc0084c2caeaf3_JaffaCakes118
Size

139KB
MD5

ff362014ccfee6f4eafc0084c2caeaf3
SHA1

c3ae8985d625e96c53aef8eec7130b4052dc7596
SHA256

da70bc17d86e7c779bfcc5b180f974d3e4b582ab6e0eb213478b6bf4cbe8413c
SHA512

66452a9b08ade7e8cc8332eae263716338a46da1d49854f13b85d8f32d5430062dc44a1ab83b24e6ff0959f6e37c93c02657a285d04f92c17157dff723dd40d7
SSDEEP

3072:oxZS9wbUl8tJZibnq/TLFZXQaMPcXNtHrBEO:oxZ7S8tTkq/TpZXQaMPENtLBE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff362014ccfee6f4eafc0084c2caeaf3_JaffaCakes118

Files

ff362014ccfee6f4eafc0084c2caeaf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

vmsncf
Size: 3KB - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bovmzjb
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xxl
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE