59b588d01dd7db482245145df89931a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59b588d01dd7db482245145df89931a8_JaffaCakes118
Size

207KB
MD5

59b588d01dd7db482245145df89931a8
SHA1

63f9f81e8ca53c2406c5ce43f0fe1a591ed79144
SHA256

98a4d933df18b70e67790f0d2ee3ff3990649c5e3e28f0a37bec00e06bcac3f1
SHA512

777990377b50565d0349f897711d84d1784e8a4a5a2e7e99a3e127ad917343d84dc1450b0600e8ec21c2bac85b054396ae0a5a32e698b9bfdc2ca4fb7c55f2e7
SSDEEP

3072:fA9Lz20QlGZHpjj4MOuSe8k+6wcZ7nUsfgXJs7r5kvEmDq2lj0f6bQy0MFN4hZpq:odVJUMOuSjk+kGkj6YA90ANYpsFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59b588d01dd7db482245145df89931a8_JaffaCakes118

Files

59b588d01dd7db482245145df89931a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ