ff9a08e3fcbfd609d0f7b8f4f68ed08d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff9a08e3fcbfd609d0f7b8f4f68ed08d_JaffaCakes118
Size

428KB
MD5

ff9a08e3fcbfd609d0f7b8f4f68ed08d
SHA1

c80be261c285ac635f3d5bbd100f50c498ccc6ba
SHA256

58a308697d26a67d067ec2b050855a8c525f3616a51a7a0156beb47d0081ba42
SHA512

4378e09b5b463c36d7c173cc04ecc9c31780088bfc27741333157c6868237ef17092b5e2c2ef9deb0183781e46250958daf7c1c27f2509beadcd1940d112c4f6
SSDEEP

6144:fHWUrEzZ+FWEp/VwDPOG27iYuAr/ZBzWs6o21V13mTKLY0KGeZRNvjv6VR/:fHlI+FHp/0PTaiY1r3qo2t3mjhjW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff9a08e3fcbfd609d0f7b8f4f68ed08d_JaffaCakes118

Files

ff9a08e3fcbfd609d0f7b8f4f68ed08d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 204KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE