ff9d76d4e4cec58df42354f13b610333_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff9d76d4e4cec58df42354f13b610333_JaffaCakes118
Size

22.5MB
MD5

ff9d76d4e4cec58df42354f13b610333
SHA1

a4ec8cb0d78b52d6cf5e4c50c7d3da6ccd53a1ab
SHA256

44a0304554c2892e6e1214365970b3dc524d5dc1d1707116cb0c45716be756bb
SHA512

21f6be2a773ae42346804834c23c4d97c53c896105a8a95870c12ee919c347f6a9e93f7a3a57fe49225bcd8bf927d6ea46f7eff850856f5f695935f489932330
SSDEEP

196608:dm8H6DwWEXpPpE3wD2trLuc1Zl2G7GQ616LJKhXDWpL7fM0d:cD45PpWt2E7GNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff9d76d4e4cec58df42354f13b610333_JaffaCakes118

Files

ff9d76d4e4cec58df42354f13b610333_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ