ff1e97202af1707257a878e30d2f8e2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1e97202af1707257a878e30d2f8e2e_JaffaCakes118
Size

628KB
MD5

ff1e97202af1707257a878e30d2f8e2e
SHA1

32abdf79a24458b8357c3ac119c01298707b1aa6
SHA256

d9ee8cabc707bd8b091a6fc7ef88fcda6a76ab248b5465f8cfada3b0134e1b39
SHA512

413bd1fd16e6ee7281d6307855a93f8f998c03de4011857b81c961134a669067c8928427e70e2fc6039dc3ce0804cd018e3e549daa15e11abd7e76468c40cb12
SSDEEP

3072:LUPsWgqLYBrSX2EMZ9B8w0ZJlSKfe57Bik7rnCfT/xI7WSp5+bhfi9TOJPpF5/1c:LntZ44ve1Pu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1e97202af1707257a878e30d2f8e2e_JaffaCakes118

Files

ff1e97202af1707257a878e30d2f8e2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 612KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE