3ffcc11f9410b2121eb9cbf82653b660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ffcc11f9410b2121eb9cbf82653b660_JaffaCakes118
Size

17KB
MD5

3ffcc11f9410b2121eb9cbf82653b660
SHA1

be769b2afee65d10ac941f954753b45923e55ea0
SHA256

d7e205b925ef4fc109bcfc1c13b889a551f2259e0e7f69ae731dc2131cd0a773
SHA512

5fc964a33ba21a155c28dbd4ec76fc0c6829cba15d3aaadd88da752cc6d731a5774e8f0367cc16936931fee6236f535a7dfdcbacdd012ec3dbdd74238c3bfe27
SSDEEP

384:Uv/W8tC60398BltkRh0EAoj1zquFhssj5HGp0AO5SfdHfKB:SxC60SlPopqursuHKS4fKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/flos.exe

Files

3ffcc11f9410b2121eb9cbf82653b660_JaffaCakes118
.zip
flos.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 102KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
˵_Readme.html
.html