ffbb5e590556fa1f93f1ca896b23db24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffbb5e590556fa1f93f1ca896b23db24_JaffaCakes118
Size

781KB
MD5

ffbb5e590556fa1f93f1ca896b23db24
SHA1

27db1293411efe7726489aa9c0bc42dcd6199f5b
SHA256

b221e6ccf42a0aa879a3a49c6b9ff9962383ea75d93622f57ff218406dc2ea76
SHA512

8d16c90b302456812eea29d9b784f77c20a82c8f663eaf825d3b64fa1e9e39740c04ca885b863d7a45ff8bfb196f0d4d6654899f28111f03141bd84d8f720c5f
SSDEEP

12288:4uP4cvFWR2WACH/m0/kgsv3orqqFSyplOZqt0viAaYTUqnzsB:4AER2WACl/XsvIqaSqUC5YTU+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffbb5e590556fa1f93f1ca896b23db24_JaffaCakes118

Files

ffbb5e590556fa1f93f1ca896b23db24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ