ff91ef8b04b5220ed9d37396b71c37e2_JaffaCakes118 | Triage

Sharing

General

Target

ff91ef8b04b5220ed9d37396b71c37e2_JaffaCakes118
Size

19KB
MD5

ff91ef8b04b5220ed9d37396b71c37e2
SHA1

f181b756586f001ffb8ca5a535b1a863bb192445
SHA256

e538174dd4ae83a8d7889935557ff8d0c6042d1a6c67015f4a06f772ede2e16d
SHA512

1ddca3965153374ddd02b80a6db1a25b3ce0811096b5c1d997c63bf14731a06d6bc7bf2862937b0896699a9f5cad5be44dc7f8c22dcbea94f71287ce817b5e2e
SSDEEP

384:cfVeAsswPjqA4sWTD/DviOuz2lnz+H4TfkU:cNeAslyx7DviOKeyyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff91ef8b04b5220ed9d37396b71c37e2_JaffaCakes118

Files

ff91ef8b04b5220ed9d37396b71c37e2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ