ff086af89575a66100b4e876575accfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff086af89575a66100b4e876575accfc_JaffaCakes118
Size

174KB
MD5

ff086af89575a66100b4e876575accfc
SHA1

32b2a52f7e182998fbdb9ce6dd8447c9f9df262e
SHA256

b4ba3de46d081faac7aacb1722ebacec765a4aa391e378c66ab709a50bc17b08
SHA512

812c09e7f4b255900fd847e2825d26a0a4c4de7a764337d8b163b7a325bbae4d8fbdffd74cde104b4a70b6080e7ac93b8d9372e318250577c5606db0a3fa8aa3
SSDEEP

3072:NUkqFHZRJ+ozcwTtPBoK44AbTqxGrKt38EjUBWbC8o7Pz/uKFo5sPtRO:NUk25mo4uSKYbT6GCsPBF8S72KFouP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff086af89575a66100b4e876575accfc_JaffaCakes118

Files

ff086af89575a66100b4e876575accfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ