ffc8e353a6c98966981fbbbc75c49de9_JaffaCakes118 | Triage

Sharing

General

Target

ffc8e353a6c98966981fbbbc75c49de9_JaffaCakes118
Size

116KB
MD5

ffc8e353a6c98966981fbbbc75c49de9
SHA1

a47b297113df9b528b75290dd4a55f7c50bad58f
SHA256

bfcd85c519773aae02dccd91cba0f64730df2ccbe4088fdf1bd4ebd6e8076af2
SHA512

47df5fd81d9045d01f2bb9c47f070d5f25aa57d3368a309dd6d518d4232bf25d151cc862ded5169dd5ee6bb260ca5ce89fc092ceceb413b556e44aa54c67af20
SSDEEP

1536:NeM5JJqUQ8cYE4+VXI9Cwkx5V4pDJ26GZVeJsFcBeIymwPZAgwuxDnghsRcQP6bT:NeMXTQdg09IJ2lZVeSkyfhHDn+lJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffc8e353a6c98966981fbbbc75c49de9_JaffaCakes118

Files

ffc8e353a6c98966981fbbbc75c49de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ