59bae67195a992c1b0bdf988071f4a30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59bae67195a992c1b0bdf988071f4a30_JaffaCakes118
Size

287KB
MD5

59bae67195a992c1b0bdf988071f4a30
SHA1

be5305353bf932b1603be0b8284405f8c0e3f87d
SHA256

901668227138634d040b0d8a94b9024cf13787b8449468aace6b78ad73bca6f3
SHA512

ef8a6c925c2357af216f1c97beea9836cdd869d77177d23a92e465c59c53d4a3051fd6485ba1a904f5e04cb760b4f3fb5d3607edee818fc45d0e9f1c74625e18
SSDEEP

6144:8aZ1aIc5P1/fh6lm+Qff3/fwleuBk+GHyMqyfFWN:8aZgv5P1/Zz+Q33HMe+n9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59bae67195a992c1b0bdf988071f4a30_JaffaCakes118

Files

59bae67195a992c1b0bdf988071f4a30_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ