1b59157959647b889719083ee3a5701c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b59157959647b889719083ee3a5701c_JaffaCakes118
Size

615KB
MD5

1b59157959647b889719083ee3a5701c
SHA1

ad6f7f06197a6a15ed4563d6f86170b574d37452
SHA256

063ab92b5e1f68fbb2fb8b6caa134cb0fd1a5ec9eafe0db3150b7ca3015c6166
SHA512

7b837aec249db05f13cd46f09d5adce0666920f0b4c2729c017dea40215961bd8ff3ef8a27d4ec7a20908d675c9c64a3c4ed4025084257239a97fc8dc2d4a6ee
SSDEEP

12288:goUcG9/CUnrvtE0ht9kHd+xyUzPxcVAJNzFhN/Sc4DQFu/U3buRKlemZ9DnGAeR8:ByVjbtZqdTsTJXhFA/+4SV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b59157959647b889719083ee3a5701c_JaffaCakes118

Files

1b59157959647b889719083ee3a5701c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 534KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ