ffc26fe607d014118dd0c5eed792d3d6_JaffaCakes118 | Triage

Sharing

General

Target

ffc26fe607d014118dd0c5eed792d3d6_JaffaCakes118
Size

721KB
MD5

ffc26fe607d014118dd0c5eed792d3d6
SHA1

c137fe353f6d8f586bd273199c645be53e456a24
SHA256

97acf0018de74a92890d9f3f0dd871d35c748ec17cdd32843b079b234f47d37e
SHA512

4fa7b9872ba36f86f8c67f4b2956e5b85c8d8b92de4646720f92f65123de1d2cf5082d7df955a8d842fb7c85b25f46fc6ee536afa36ec7281dedb12aed999e21
SSDEEP

12288:6fUVqNRyrmLEfIS7tOHmH9hbFdzgYCh23ZuNnnhP7ZoyXqqiE2AK6cLba3fWoAgI:6sVqqr9fISBaK9jhgYCh23cNnnhP7ZoX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffc26fe607d014118dd0c5eed792d3d6_JaffaCakes118

Files

ffc26fe607d014118dd0c5eed792d3d6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ