59a215751cf04c03529591e3649d6c03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59a215751cf04c03529591e3649d6c03_JaffaCakes118
Size

124KB
MD5

59a215751cf04c03529591e3649d6c03
SHA1

9aef76620eec16bdec8915bb0f10c0c38945d900
SHA256

42e87c9dd6c335717c4e29813cbc753f8dcd63397f82827373c54df7e96f28c6
SHA512

9693683c781111a2b3ff4e2d8e0bee9d5a3c889de1576ef80112008a508a7b5f2910bdc82b02f49946a2d0708bec0ea0592f1e248169a8250f07d98680652c78
SSDEEP

3072:tF8XbKWkcHQ7oQCkYzdUlZ2zogp5kkPLBV0x:78XnkCICrzdiZ2zz5k7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59a215751cf04c03529591e3649d6c03_JaffaCakes118

Files

59a215751cf04c03529591e3649d6c03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ