f00f3fcc5671a5941c4626361ba0848d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f00f3fcc5671a5941c4626361ba0848d_JaffaCakes118
Size

803KB
MD5

f00f3fcc5671a5941c4626361ba0848d
SHA1

179cda26fc80ce4257c991795c05fc82997c1c67
SHA256

b3ccdf03962ec9972b216ee8e253ed7213d5bab6b47b950262d27ebb4bc5ab74
SHA512

e018944e69d58bb507d89616f738cba3484c5f37d71deeee28e23c1e2e6901878496cd28b950e9a86cc7f12aa9ff349e998fdbf309e4964d9a79c8a1ab00e7bc
SSDEEP

6144:e36ztCGfTDbE6g1mtlvruBoaYMSgJgmr+uYFn0AMv31ebLJnhRqCVgNQ7ZIlGeza:nztCMTDbE6guvgH+nWAM0blhRLVR7Ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00f3fcc5671a5941c4626361ba0848d_JaffaCakes118

Files

f00f3fcc5671a5941c4626361ba0848d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ