ff314783a8ac319296b3af3109d5283c_JaffaCakes118 | Triage

Sharing

General

Target

ff314783a8ac319296b3af3109d5283c_JaffaCakes118
Size

184KB
MD5

ff314783a8ac319296b3af3109d5283c
SHA1

422b77c3c32fef8a2fd6d22d37742d30dcd2423c
SHA256

2cff6848c838d40310281098f610d09c0798512b592b9043e729fe4cf7df4132
SHA512

15a867a6238c209ec8c79e21cf1d9604d7e5214beaf6dadd09050f085bfaf30dd9c1037d6c392c82404c453b629c264c9b9f106338b6853d9514fe98c77ee142
SSDEEP

3072:r4doQSbVmvacHTOwuks7Ab4c8JOyOl0ZBZLIHAWgrOgcoBOZuQCfxUaGQMQ:MCwvacBc7u2iII617Mla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff314783a8ac319296b3af3109d5283c_JaffaCakes118

Files

ff314783a8ac319296b3af3109d5283c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ