ffbd28683aeffc81daf48c99ff57b78f_JaffaCakes118 | Triage

Sharing

General

Target

ffbd28683aeffc81daf48c99ff57b78f_JaffaCakes118
Size

385KB
MD5

ffbd28683aeffc81daf48c99ff57b78f
SHA1

1b0dfb8e4f4bb63d3d5343a4bc506919ab0c6f93
SHA256

68b4d7fe1d55cb0f03ce2a30bc591f827889b3db8c3019e2cdb4ea506842076d
SHA512

d82cd2f3328ad2caf43f8dcb1a48f8c6bfeb37d7a8b6b0b4bac4befcee370fe0cfda999ac0cd3340fb3d962966e618d07b48d493c80e18caf6fb724067eb3c7b
SSDEEP

12288:GvCaFvf+9LWKusC8wGqUF6pRZ2O77Aq0nlSwB:PaFvUusC8v6f4E7AJnlSwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffbd28683aeffc81daf48c99ff57b78f_JaffaCakes118

Files

ffbd28683aeffc81daf48c99ff57b78f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ