ff21c58572b1c1d73b9100815a313984_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff21c58572b1c1d73b9100815a313984_JaffaCakes118
Size

603KB
MD5

ff21c58572b1c1d73b9100815a313984
SHA1

d790e875dda8a52fdd1238c3c9b9ac4c5c3259b5
SHA256

d54a9cbed4ebd547d3d317e9c804ce0caf29c8c042df939d8b1b12a6ff0ca7f3
SHA512

1fcc25347414a2c42e013224422d57d6c371c07b18a31ebafa9bc4b15acb665741d5bc052dc19097d7d39a284c3b50de9a4cfbfa8ddbd826386b698c0df0780a
SSDEEP

12288:xW/InTTY/QefcqoO1t/TjW1MndE3OYETnsBZdlVDA:xwiTTYZfloO1tjWeFDTnsy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff21c58572b1c1d73b9100815a313984_JaffaCakes118

Files

ff21c58572b1c1d73b9100815a313984_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ