599f88cb02fd40128b40025a5a2e5276_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

599f88cb02fd40128b40025a5a2e5276_JaffaCakes118
Size

1.2MB
MD5

599f88cb02fd40128b40025a5a2e5276
SHA1

686931997e43bc1da466c124e1cb7318b15c0767
SHA256

f6878ecbaf2bfad75929d411db335e6891eda0c157ade905d1dde02c19feac5a
SHA512

10736e588492d876fb0c2d131185ee5182f17775cfdaae6f8967b40389f96eabd6bbb07ba952de1fa2ecab128ff18830d1dae52c2961152e27c7091745b6a43e
SSDEEP

24576:FefoJNHSBARwPIqh8D5RKiyd+Xl7yXuP4W:FHAUv1y+P4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599f88cb02fd40128b40025a5a2e5276_JaffaCakes118

Files

599f88cb02fd40128b40025a5a2e5276_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 980KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ