59e57167d059780c1347f96dd60a35eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59e57167d059780c1347f96dd60a35eb_JaffaCakes118
Size

2.6MB
MD5

59e57167d059780c1347f96dd60a35eb
SHA1

aa3dc005e4b0932976166086427cb502a5620ee3
SHA256

958067e6f6fd96bb24ef8d2f4178f5537925ee26a2cdda7b4d21492bedda2c95
SHA512

c37718b7c8868072cbf9bee1cb520f6a9e9388f81fd5554116801268fb5acaf2131843af85cec14a2449e0013ff2056f2ccf83411b38a89c51c6bb6cb46e8ca6
SSDEEP

49152:SGpdcTCxVzQmTmpba9yoxYbYvJrbxEeUP8C0+vnpDjIQn17WXRx1RwjF5l8ZTGzG:Dpdm+zQmTW29GYvtxEeG8C0+vnpDjPiZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e57167d059780c1347f96dd60a35eb_JaffaCakes118

Files

59e57167d059780c1347f96dd60a35eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ