616e6aef2b15486c5fd5687cffb33a4b_JaffaCakes118 | Triage

Sharing

General

Target

616e6aef2b15486c5fd5687cffb33a4b_JaffaCakes118
Size

1.0MB
MD5

616e6aef2b15486c5fd5687cffb33a4b
SHA1

06019d89f54e7d2467bec9da751a42966afa2fc4
SHA256

1fceac75dcaf47add663cf2abab5d1728e8bb2f65c7f4c6d6e8d0f06af806060
SHA512

497c2319756019087664a2bc4aba6d16361b6e1c3f951f674c9c956c424a31c4730d5b323c9f948e356277f2b756eaff76074652dee341010709697fc75e21f9
SSDEEP

24576:F4LGjPcLPYmx3P8ahAjr2B51J7YvE5XAP55Q2NrGQ:uLqULxf5+r2PEE9APznNJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2343220820185117653724284721341YRWYRRRET56556U P1DF.exe

Files

616e6aef2b15486c5fd5687cffb33a4b_JaffaCakes118
.zip
2343220820185117653724284721341YRWYRRRET56556U P1DF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\USER\AppData\Roaming\System\jobs\sunny okey\nus\nus\obj\x86\Debug\nus.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ