ff570cc77459f84f520c6a6143a7aeb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff570cc77459f84f520c6a6143a7aeb7_JaffaCakes118
Size

56KB
MD5

ff570cc77459f84f520c6a6143a7aeb7
SHA1

b0a8c23c6a16ef82f563804ba4cef3fa57d11df2
SHA256

978045b96db12f1288480a48dbf8815294003c4a326786711e59d3de40b0b19b
SHA512

cdac4b3bfdfc628c29c29a9f0026355e0e76181079ae36411c7ecebf1f368ef07fb2e323947fcf81489877e3f51ff5ffab038ed522dbd84d61e01a19d289766c
SSDEEP

1536:j2gV0sadQTdcc8oklH80AFZETKCz/+1x7EptKbM8:bLtdcdlHPATEWCzix7EpCM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff570cc77459f84f520c6a6143a7aeb7_JaffaCakes118

Files

ff570cc77459f84f520c6a6143a7aeb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ