ff8a19ddf583c25234f74bd49ec3ceb4_JaffaCakes118 | Triage

Sharing

General

Target

ff8a19ddf583c25234f74bd49ec3ceb4_JaffaCakes118
Size

121KB
MD5

ff8a19ddf583c25234f74bd49ec3ceb4
SHA1

8951531bbee6be1d8ff3d18095ec9f2d51bb67aa
SHA256

0831a3b6494d9e9f25615c57256a629e42f1e4bbc9f0352458bf8705998023de
SHA512

c49af15a7fbb4bf2bf5a0f5ff4e50a3e4f43f0a81cd01a603e4f00558dd8522e9b72bc8ffe40f26b2c92093ec0c142d8ef165eecd47eadc38fdacfbea43354a3
SSDEEP

1536:48pz9CroF2iXZcgUxERsWouJ1gJcxWGd+oryMm+HErUgAG3YxJ:48pLXbUxksWofOWGd2Mm+HErUgAGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff8a19ddf583c25234f74bd49ec3ceb4_JaffaCakes118

Files

ff8a19ddf583c25234f74bd49ec3ceb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE