ffd63404e1ed1c5e28ef5e3a3a42c545_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd63404e1ed1c5e28ef5e3a3a42c545_JaffaCakes118
Size

6KB
MD5

ffd63404e1ed1c5e28ef5e3a3a42c545
SHA1

0839a4b89414286bf0524befa79255a3b2f455df
SHA256

e2b21bd0846ad13163e8f1a298c41114480b44681ba6e32458698eec1dd663fe
SHA512

858e693c482d993bb35967ba6cb4bb5c09d4f87a5a066540614b59529cdd3efbc6690fea0eca3fb34858512efc2c32be17b352ca008264b54650bdb041abef9f
SSDEEP

96:ojN+H9gvU5y7Fjw/oq23YJerOCRZfoB1s:o8dMnFjwF23YJerxuDs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd63404e1ed1c5e28ef5e3a3a42c545_JaffaCakes118

Files

ffd63404e1ed1c5e28ef5e3a3a42c545_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ