ffb873a16d5cefe1a1bc8bb2a248c395_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb873a16d5cefe1a1bc8bb2a248c395_JaffaCakes118
Size

616KB
MD5

ffb873a16d5cefe1a1bc8bb2a248c395
SHA1

f478e74e582d2165b2c159b5bddfb6ab702052e2
SHA256

3601f5cdc0d901645794f8b37a1f725c5c6b678f8be70f0344065e34a8df0f76
SHA512

fd54c81ad58cc8945d4e2a59c16e094bca84c459f6a924728d0213fb15b3a8b36d8954c445b3010d736e71bafe3a4fa013e457ed11c239dbe837b4228f04f087
SSDEEP

12288:9u1Qm+ix/VT8FhQDicgL2t64CqnRGOQkWe1O0y:99rDFhQeFL/YRGOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb873a16d5cefe1a1bc8bb2a248c395_JaffaCakes118

Files

ffb873a16d5cefe1a1bc8bb2a248c395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ