859417420f10bb0c8faf3059c60d2da9_JaffaCakes118 | Triage

Sharing

General

Target

859417420f10bb0c8faf3059c60d2da9_JaffaCakes118
Size

4.8MB
MD5

859417420f10bb0c8faf3059c60d2da9
SHA1

c74976aebaee751437dc61a12050ed34938a76cf
SHA256

05a048a74b4f8f2d3310582d34e27a80e28fd54b49f4774666307646257b8fba
SHA512

b88c9a1e688b91ed039b75436cae69f9f604ecd1d444c18a67f4f9bb5ebf460441bcecedda83568f36fd21452542556450ddd1a3825b6c1de9a8d9865df8f90b
SSDEEP

98304:KJY7rTEbzOfvSVnkijfyQolFy5bSef28aWvPT6dFq2oLNsJrCj:MY7EbzEvS6wfyQ95nfJHT6dFqdGJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
859417420f10bb0c8faf3059c60d2da9_JaffaCakes118

Files

859417420f10bb0c8faf3059c60d2da9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 600KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ