ffebc9efc6ac43dab0006cb02a72346a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffebc9efc6ac43dab0006cb02a72346a_JaffaCakes118
Size

125KB
MD5

ffebc9efc6ac43dab0006cb02a72346a
SHA1

09b49331a1e2aced2b253ed58938a9f46aa9e928
SHA256

0b56e676c56430bc06cfbf12af3010428d42ed1f4f48788b79d2ae6c0b49807c
SHA512

faa6594e2c729a32d06ba53eab6bbd2eb88730b83f45f7858dc1ce99e6fe4560b4168caa442e8f97599843c4d222f5ff0414c17e8f15a0f47bf18e7c7eb271ea
SSDEEP

1536:CKXfriEQAllhuaz/ztuuNtHvPLgWuRKeAxXHmn3Q//W:CKvrXlBVxP8NRK7Rmg//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffebc9efc6ac43dab0006cb02a72346a_JaffaCakes118

Files

ffebc9efc6ac43dab0006cb02a72346a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 331B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ