ff60be6255deb53ea01f79d272da8b9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff60be6255deb53ea01f79d272da8b9a_JaffaCakes118
Size

67KB
MD5

ff60be6255deb53ea01f79d272da8b9a
SHA1

36bd7249307ff00c9e410af603c2bfbd99e1621d
SHA256

139888fecfe6295cfa438592370e0d06d9893a03378222748941204a765898bc
SHA512

eaf0b9783b8a007662803be0d3b69f4c07c15355bb1e88bf7a89fed9de18a56308260e6980637a5ca7da68cf26633f6ca1d29d1b3cbb11306fa03da514846ef4
SSDEEP

1536:WZOGyDK3R9gykN5jRSGrTVhwf1Bm13QGkmKAjiG:udAjRSGr/01kVvkmZjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff60be6255deb53ea01f79d272da8b9a_JaffaCakes118

Files

ff60be6255deb53ea01f79d272da8b9a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ