ffb15fd0cf669b319e016eaba82786b3_JaffaCakes118 | Triage

Sharing

General

Target

ffb15fd0cf669b319e016eaba82786b3_JaffaCakes118
Size

408KB
MD5

ffb15fd0cf669b319e016eaba82786b3
SHA1

e54c551ed6047f468a9d6b6ae6101f1479a4452d
SHA256

ae37f69a451b28a832290c0fedea450745c01a41637a0002f80f71bc5f210703
SHA512

8e23feb1adf795cb0b67936fde181b84a8512d2b9c6f5129fbf27072257ad7f999636c6bcd915b78db0aa4ef14e5cf06861eb191ba6a816cb91e353d48efa12d
SSDEEP

6144:X+F4jmdIGeMuBi835d+wRKNcEeOEN8JwqyV0+1KlYnwQCKVZVFQoNRa2ClXX/3th:tzGIBiY58wom7O7JeVKWnPCwV56r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb15fd0cf669b319e016eaba82786b3_JaffaCakes118

Files

ffb15fd0cf669b319e016eaba82786b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 397KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ