f59c8c7816e696d26ae68862371cfbe8_JaffaCakes118 | Triage

Sharing

General

Target

f59c8c7816e696d26ae68862371cfbe8_JaffaCakes118
Size

28KB
MD5

f59c8c7816e696d26ae68862371cfbe8
SHA1

99b8b7b1024e39eecfc2117429429872635c95ca
SHA256

f886968e8b52d32e88ea536baf636952edb891b89a3b10a997401c8eebbe2041
SHA512

3a9163f4569b388543ec9d8ca7cd258c990255bea70e97342f8fdbdc4fb5b766768fc2f461c23c6fe21e600b9846c07c48feee48b6c073ee5aa143917c979f9f
SSDEEP

384:ShfJx7bDp5uO3SvIpHgscv6M7J8hd2D1hxHXjmDo4P79iURxYoscXIWm:ShBx7bD6OCvIpHgtuhd2FHzEz9iWBBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f59c8c7816e696d26ae68862371cfbe8_JaffaCakes118

Files

f59c8c7816e696d26ae68862371cfbe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:~�5
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE