ffb393d6e50e62c0a788725523a30987_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb393d6e50e62c0a788725523a30987_JaffaCakes118
Size

62KB
MD5

ffb393d6e50e62c0a788725523a30987
SHA1

0b9d7106b2c115b4908b4d97cd6fb88d5b6ab7e1
SHA256

daaece8b83c1e39b5d565360be04d542f49c83a5694297c5354080ad54357fd2
SHA512

5794567d78317d6c5a8a85219a4bdd54f502a0911361296d59f5929e62bc98dd02d6fc18f03c8ddc265d3ca051713f69fefed7089b67a6228c4f30eb602914fd
SSDEEP

768:dCdXpy+dKvEfGv77Dg52JhEZ2Fa5WeHbcr40jITU+eYYUlVCbspXjQjPjxStD4KI:Q++dd+nDa29wH4CJ/WAZMjPNG4KRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb393d6e50e62c0a788725523a30987_JaffaCakes118

Files

ffb393d6e50e62c0a788725523a30987_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE