659f41240cfa97ed2dfe65c465644531_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659f41240cfa97ed2dfe65c465644531_JaffaCakes118
Size

97KB
MD5

659f41240cfa97ed2dfe65c465644531
SHA1

9d3e8f80a7c1d273503488b1bdddb5248422d8d5
SHA256

eb8583f499c2779bc9da942a2cb35c6640dc5d76d0819c7e555d50d2531c7713
SHA512

02ae32ae89abe347729ff311d6d782851efd004f2fcf1b0ac5305f91da7200155f85a60b5de44e9ee85e944061fd9a492decacbc3f0afb6bb8863eb6c323a2d1
SSDEEP

3072:KSVUd7M5ue/Uk1rTFk57mlSNLVdn5kse27pfG2:KSVUW5ue9fFkUinKse25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659f41240cfa97ed2dfe65c465644531_JaffaCakes118

Files

659f41240cfa97ed2dfe65c465644531_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gbhuug
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE