ff8418886da47d73ae1c423209fa19e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff8418886da47d73ae1c423209fa19e2_JaffaCakes118
Size

2.3MB
MD5

ff8418886da47d73ae1c423209fa19e2
SHA1

78c3886ad8fbf95d96f89bc668a78febf11038d6
SHA256

af7c2d48ca2d56c0cdf95d4c859ce0ff507884a42df2e2c7d44c5785b5ad4fc1
SHA512

3b50af50730c5ee3d636c08936b07547cb07b54e64667109f743f872da734f0377bec6bbc41c465dd543afc12b9ba83206040dc2821ff740b15c63d65944a543
SSDEEP

49152:LTej3ITn121SHIMwaYXOSx43W2mMeRx04DqX93AyDWOgrC5iWAwjN:Li6n121SH0aYXq3W2mMew4DqXpAyDWO/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff8418886da47d73ae1c423209fa19e2_JaffaCakes118

Files

ff8418886da47d73ae1c423209fa19e2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ