ffa5b672e71d5940df1ce3d2a6b4885a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffa5b672e71d5940df1ce3d2a6b4885a_JaffaCakes118
Size

84KB
MD5

ffa5b672e71d5940df1ce3d2a6b4885a
SHA1

c7a7f52ce5e9dd9ede4f45b3d82499977d590f11
SHA256

7237959b3b96e1a5247e6c71531859528306d9a5226be5d11929598d20c1d804
SHA512

7e0014a88814dc97ac0734b0006a0a3d3ccbcfc3e26b129c453189aedf61a3652bdac79f0d6f2c016fff0ed70590ada6438a00f76a12b4542dff3a5809bc80e3
SSDEEP

1536:XSMqVECocKbdGacYIWfWRFDvIOoYfKRKiWD1KDBVWJhqOJV1ploVwKbVdzZgMO1w:XSM6rKbdGacdWfWjIbYYNm1QWJ0U//Il

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa5b672e71d5940df1ce3d2a6b4885a_JaffaCakes118

Files

ffa5b672e71d5940df1ce3d2a6b4885a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ