cff9a8d6e9d39d5bf9fa3457682c289c_JaffaCakes118 | Triage

Sharing

General

Target

cff9a8d6e9d39d5bf9fa3457682c289c_JaffaCakes118
Size

21KB
MD5

cff9a8d6e9d39d5bf9fa3457682c289c
SHA1

e7b555b380ee37bd9af71438a8ef193a8b7335bc
SHA256

5817fa6d908e88a0007dc964f8a43b7d6168f6663144c10315190a542bd65375
SHA512

ec6c6ed2fcf931a2029e337529470a74f121942c85993c2b98d5d9e80f7a148d82e1a109d2e6a5ac9fe1662b42971e1c4eb8f0cf37253128c170a0c80e7d0379
SSDEEP

384:9TTdksMM5qCoZoQsqldlXVBwTLLzCZusWJbJCcL+O1w6vMvQpd:hisMKqFZoQ7PwvLzTCcLH1w1kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cff9a8d6e9d39d5bf9fa3457682c289c_JaffaCakes118

Files

cff9a8d6e9d39d5bf9fa3457682c289c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ