bffb99c903cf32eba18bcb910340be32_JaffaCakes118 | Triage

Sharing

General

Target

bffb99c903cf32eba18bcb910340be32_JaffaCakes118
Size

959KB
MD5

bffb99c903cf32eba18bcb910340be32
SHA1

d1a4c99c900517448dd62f2d3c33323a46329850
SHA256

8876d6ef7c5b020a07477d438dfefe852a0cdada88c8dcae45d54bac71783f32
SHA512

a1d89f94b8a9bb4e0d8baea89e88a995fd3ae56427b134e3bf0e83e2f83a9da82a03f15cedd8883cedd86db917fb0edda65ec0f7d135c5b2822fcd96c57292d5
SSDEEP

24576:nplrCP36ga2BXZp/7JgtVg8tlvHSgV07HGRObK:npApRBXtMbtlva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bffb99c903cf32eba18bcb910340be32_JaffaCakes118

Files

bffb99c903cf32eba18bcb910340be32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 916KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ