ffb3e8c80128c8213abe302490288afd_JaffaCakes118 | Triage

Sharing

General

Target

ffb3e8c80128c8213abe302490288afd_JaffaCakes118
Size

241KB
MD5

ffb3e8c80128c8213abe302490288afd
SHA1

84506dda684ff1f10f7c2a35c3a40db3d81524b0
SHA256

dfe35b02b4d814b966e2271287232a6bad0c4280eddac5426455c4df4dce2b64
SHA512

dff317d95d4bd9266458ff5266e6366a21479279fb51252affa6e3b7a01793ef33d28c7943fb910618b4e10d7088e1e5861e553723afa989fe9e403df93c8506
SSDEEP

3072:YfFsPU1XL0aSzMJ2EBtY0LCLPjF577Xsc4vV9Ly659/UEpUFUkvpyyQVyFP1OwFc:EF9LtSgBtMHXsxbRUuCCEr6bkxoqtAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb3e8c80128c8213abe302490288afd_JaffaCakes118

Files

ffb3e8c80128c8213abe302490288afd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ