f0059b101e5e3b1c14393a18c2e66c25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0059b101e5e3b1c14393a18c2e66c25_JaffaCakes118
Size

520KB
MD5

f0059b101e5e3b1c14393a18c2e66c25
SHA1

7c1179a6fc7d48735116442e3850d511cfdc8e8c
SHA256

6957ac5e0346691e4b5a64eb9891afec140d0596611f2a5b6f32dea9434289fd
SHA512

422914f9a8bf6eba39053c43f8d31ee7b308d00e1d07432e253f6d339eb2ebfefb6e4c3e30a3c244eda8fd86a4a2dd10b873ec597e5af64cfb5f19422ece92dc
SSDEEP

6144:ReRTbnUyJbSjw5uvaHeQTBZMFoaho3Hz8j/jCFfdYk24rbT9MeoKz9DCuKm4aI/Y:KbnUyJbVACdNXTYkFNphnPJIp/UP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0059b101e5e3b1c14393a18c2e66c25_JaffaCakes118

Files

f0059b101e5e3b1c14393a18c2e66c25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 435KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ