ff9f67ac95405ce62a8e0ed63fcbef46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff9f67ac95405ce62a8e0ed63fcbef46_JaffaCakes118
Size

1.1MB
MD5

ff9f67ac95405ce62a8e0ed63fcbef46
SHA1

e966324867c55eb8377013b35b87ff11ecdf3e53
SHA256

cfd3afb4b3b0061b620c191c10f2b281f556ac9fcd1750896aea626fc46b590f
SHA512

11eb62ee90483f89bbfcb36eb26906411888ebcc839a4c4a0aaf03f4bfa69414bb875543bff5480ba4bf7c88c973fa7a4d3ced6bb1214299f6391382056984fe
SSDEEP

24576:SypW9SgLNZaOdcTMuUvxIgqMbXjgKctlbnZKZFcj267U0Lyu4h6MC3:St9SgLNZa6xIQXjgKctlbZcFcj267U0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff9f67ac95405ce62a8e0ed63fcbef46_JaffaCakes118

Files

ff9f67ac95405ce62a8e0ed63fcbef46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ