59d96b14e4bf3faf6a5e5e59897ddc87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59d96b14e4bf3faf6a5e5e59897ddc87_JaffaCakes118
Size

115KB
MD5

59d96b14e4bf3faf6a5e5e59897ddc87
SHA1

961cd2cec34faf94b29ac200a6e7b984a7339e42
SHA256

828594fe9be4a0f7093e2c0ab151a40a75e65622cd8a5f8c33bd831bfb4e830b
SHA512

8ece40ea397186c5f0ebeba4b23cc43d08a6360409440c6cf39c654c041427fa1a8a5b61980ed5b37244b43ac0efd91ff0508a3ff9e23baa6d115520d590f219
SSDEEP

3072:1pLzhefTD+7N1DnwdH2DQcuY+fVFzxgH/EEXJe+Hj9:1pLzhETD+7N1DnwdH2DQcuY0yma5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59d96b14e4bf3faf6a5e5e59897ddc87_JaffaCakes118

Files

59d96b14e4bf3faf6a5e5e59897ddc87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

htjytkyllyt
rtrjrgera

Sections

CODE
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ