ffe11a35a4f3a8a8847e72cec4f90df0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffe11a35a4f3a8a8847e72cec4f90df0_JaffaCakes118
Size

189KB
MD5

ffe11a35a4f3a8a8847e72cec4f90df0
SHA1

0896644a09514c26449e62f0d7aa05b46a24c508
SHA256

fdf825734d4678cca7893a66548e5271c6251068140d4626c7221a5696bac537
SHA512

56fbc717dd621db687b89835d22bec2c20f857b6e5aca0d087abf6cbc568e420fbccfe880cbd8c904734f3977b771409e59fd83553f03d1147d9c5485ee5fec2
SSDEEP

3072:f5XeHpMb/kg7yLjgGyHwhJue0ElVAgDftDM4k/OsBsYP6daHF:fMpQkg7yLjgGThYFElVAgDftDM4knBZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe11a35a4f3a8a8847e72cec4f90df0_JaffaCakes118

Files

ffe11a35a4f3a8a8847e72cec4f90df0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ