ffa638e41d88ce1e1c9c8260e068c60e_JaffaCakes118 | Triage

Sharing

General

Target

ffa638e41d88ce1e1c9c8260e068c60e_JaffaCakes118
Size

946KB
MD5

ffa638e41d88ce1e1c9c8260e068c60e
SHA1

daa62386c6f8f0a47be95ce6a93c6b7f5331a8fa
SHA256

bc402f6c18661ed2afc2c5d2ebca315d1ad533c7f76f44160ce698239da75425
SHA512

6c1e5860a66f2c2ea3f9657da01e4833ac5cca3f01187eb071e368162a7b704cfe0ed263f45d6d3188eefce3f5c0f8c1f02d9dd982ff7bbc83f95e2548aa94e1
SSDEEP

24576:QEjHVLgUwnW5AwGLTUT/5tbWUUR5n+YMrwTU+4L:QA1LbmwVtbWUU7oUTPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa638e41d88ce1e1c9c8260e068c60e_JaffaCakes118

Files

ffa638e41d88ce1e1c9c8260e068c60e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

SCCCDDDDDDD

Sections

CODE
Size: 806KB - Virtual size: 805KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ