ffb02e13026aa69032b5cef80e8eac41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb02e13026aa69032b5cef80e8eac41_JaffaCakes118
Size

383KB
MD5

ffb02e13026aa69032b5cef80e8eac41
SHA1

5a7e5fd45208db923d5f1127acee6f5f7951458c
SHA256

8e5391b6853b21bdc9be8a488013bf0445cc193955b7e33f1dc325bae26eb975
SHA512

ed8c0d7cb81ab383fd3693562c5843ff360eba9adad199ed8484c5683ccdb996d09e8645c3ba0eae0ae6073a22ee7c470543ff5ea897e5bf8268b468a510bdc1
SSDEEP

6144:ReAI29mbQ+Fi8FnGvgrlhH7SsXscn+tuZZL7y/x6NRlJjJGFlk6IzdVe66LhRTl:TIQmUAikqxs1+wZLjRXjJwWE669Rh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb02e13026aa69032b5cef80e8eac41_JaffaCakes118

Files

ffb02e13026aa69032b5cef80e8eac41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ