59cd35db06dfd29339dcd0577ce48db0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59cd35db06dfd29339dcd0577ce48db0_JaffaCakes118
Size

572KB
MD5

59cd35db06dfd29339dcd0577ce48db0
SHA1

7acb92c7f05e0609a009eb89ac109d70eb99285c
SHA256

08586936e1ef1224bd3662157edefed60f3e1fc0704734d7a59316f2ba5118d7
SHA512

f7513f3588cd218e25c24d13528ccb74e7a2229de55806799fd6e5594286c38342619781ee8265bc541dee3cb14309f9630c1f851680c85c3f7c98ba31bbdfcc
SSDEEP

12288:8CIQ35CvjnFNo45tucwOE2CxwNE/RaR0GjZhh3tyhkambk8F6:3IQpCLnFn5scw8Cxwn0G9jdyhr88

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO 20191003.exe

Files

59cd35db06dfd29339dcd0577ce48db0_JaffaCakes118
.zip
PO 20191003.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 633KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ