ffd76e0c9b1cf492761a8b79a637c750_JaffaCakes118 | Triage

Sharing

General

Target

ffd76e0c9b1cf492761a8b79a637c750_JaffaCakes118
Size

277KB
MD5

ffd76e0c9b1cf492761a8b79a637c750
SHA1

7b156646b6b91a3dab39bb4446e18d7d7b4b7b04
SHA256

3c4fb2a5baeb24d8afd27509e338ad4c3e624257d081e603c66f5baf7906521a
SHA512

dc7662302c9d31b937cfa4dc0026bff8b09672ee08971ff354f97cb279f12599970b676404a23c81dc9fa17423617cbc7787fdf95ed713c9333b2551916f31a9
SSDEEP

3072:DJDR/I7cYrrnGYtAnwRaycFyExbpjC9O20HyPoTGDAA+1gwYTxMw79Fus1+zmzg:SDRayUywUpEyPo4AA+WxH79FusUqzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd76e0c9b1cf492761a8b79a637c750_JaffaCakes118

Files

ffd76e0c9b1cf492761a8b79a637c750_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 735B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 37B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE