ffdb07d90c42800ea4ed7d2305b86a14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffdb07d90c42800ea4ed7d2305b86a14_JaffaCakes118
Size

506KB
MD5

ffdb07d90c42800ea4ed7d2305b86a14
SHA1

f0ac37164399344577051c5075750b54bfa43d7d
SHA256

a05a9b19f2b52d391740c59683a3875054a41136f045641397475d19c506b0df
SHA512

04d34e118913f03f3e31fcab8730eceed8f9311ee5ba1c7e49b3aa4bfd43eee5635fc233dc5d7561d9e492911ec3b79a7f16cf010a9571c33c5b53ad5b4b7dc2
SSDEEP

12288:IUIFhdm37dV20q3iWGHtlNbkmefddfVy8gkdT:fIFi37dV8GHtHkmGdNndT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffdb07d90c42800ea4ed7d2305b86a14_JaffaCakes118

Files

ffdb07d90c42800ea4ed7d2305b86a14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ