ccb8b817085d6383614156053979e81b_JaffaCakes118 | Triage

Sharing

General

Target

ccb8b817085d6383614156053979e81b_JaffaCakes118
Size

989KB
MD5

ccb8b817085d6383614156053979e81b
SHA1

924db1dab545f9d08b47093d342d024217607d1c
SHA256

f55f1629d0ce8fefbc36ec5ec8f108485e494363531f372f4735186aa4c1bc85
SHA512

df6bab868826f108712079b126382541f168d855e811860569099b3daf41a289472302016c61fdd40555d4472b4d75efa4667a44b00c97d5e1b77f04d415499e
SSDEEP

24576:ErYUhzRsCg6Yn++QKSWoxc3ukISy9fezY0pc7uh/f:o+Cg6KbbjUkISAe5pSud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ccb8b817085d6383614156053979e81b_JaffaCakes118

Files

ccb8b817085d6383614156053979e81b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ