59b7ea9ac383134cea541e0526fa336e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59b7ea9ac383134cea541e0526fa336e_JaffaCakes118
Size

4.6MB
MD5

59b7ea9ac383134cea541e0526fa336e
SHA1

d1a830ba80838a54f07c44095637080467d1e4d9
SHA256

95a1d05d0d610c7563948bd90b3c3489424b571a143569bc37782063d566592c
SHA512

46af3915039a766056ba947c3662bff69a03a6b787b31a1ede65d4d4eef28af8f8a6a637c4f78c6758403e4d370e73b13b779e32d1572b6d7bb1bdeef6aa6768
SSDEEP

98304:CzVEPoQFVn3gfgMeXug3OMRJ0zYZHymS6iNDzP91f4iYQ:CGPokV3g4vegeMRJQY4rbBzPzf6Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59b7ea9ac383134cea541e0526fa336e_JaffaCakes118

Files

59b7ea9ac383134cea541e0526fa336e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ