8c35cccd9c2623e8c0b9436c9bfc8d59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c35cccd9c2623e8c0b9436c9bfc8d59_JaffaCakes118
Size

27KB
MD5

8c35cccd9c2623e8c0b9436c9bfc8d59
SHA1

cc44e072f2b22681b72d82054c37b9390e11f893
SHA256

d4699997706a8719df44129f4c893234e712cd4d54aa1974d56e897aa757eba5
SHA512

662d412b08b7c6bdf2fef0f4b02140bf923a46cf5b1bb1e167f95c403663c943f43e1ea700ac128e2acb629724690212a11286708b8029b9460e5fad2e8911c3
SSDEEP

768:opAQuFxiKSyfXkn5D1gC93hzN7Giq3mTJHc2:opAQhtnDgwBGiq2FHc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PagoListo.exe

Files

8c35cccd9c2623e8c0b9436c9bfc8d59_JaffaCakes118
.rar
PagoListo.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ