59a06853e026e52d44d0f1ed091795f4_JaffaCakes118 | Triage

Sharing

General

Target

59a06853e026e52d44d0f1ed091795f4_JaffaCakes118
Size

326KB
MD5

59a06853e026e52d44d0f1ed091795f4
SHA1

b7af4aba480c4bfb25eb45154d09419af910176c
SHA256

64cc3031291e07fd6f9dfef18901bc07d4168a70a92fc53ad94ea5b8f1e30917
SHA512

9814eabed8b221d3bc62a4a76bd5bfe24a354aed6cffef0a35a8547e9b6a2898f5e8743a36e79e2840d4164e08d7d7fe7d0b3f1bb0df1b8b85d8ef631ead4f55
SSDEEP

6144:X1ynzzDab2Grjw0dJOAQemKU4pVwowCkMyGjMf04AZhkrat6D:X1yzMoZe/zXkMIfIhltK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59a06853e026e52d44d0f1ed091795f4_JaffaCakes118

Files

59a06853e026e52d44d0f1ed091795f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 918B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.entry
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: 314KB - Virtual size: 316KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE