66c59888eede6e4263bc5b534edc420e_JaffaCakes118 | Triage

Sharing

General

Target

66c59888eede6e4263bc5b534edc420e_JaffaCakes118
Size

484KB
MD5

66c59888eede6e4263bc5b534edc420e
SHA1

430306d3ce3f3a205f2e70f5edbaa041efd8dc9f
SHA256

a28166d8900c0353c48603c1c71950a76b4d1d308f3667dd0de4a30ddcff7e93
SHA512

72568a7840cd9f7d42579c124243266781bd7885cd2bd264d14ff85b6afbe038f8d3e0c2021cb0a91e1919d4532622d689721d7d08c6bcd2848bad4ec44739eb
SSDEEP

6144:hm5qGis/Lr1Zjhuwf5vo/l4AYv3zU/vamKR4ANNUP1r/n6hFvY3wkQKI/qOlp:h4qGic1Zj5Q9KRcd/+FvYAkJIfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66c59888eede6e4263bc5b534edc420e_JaffaCakes118

Files

66c59888eede6e4263bc5b534edc420e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ