60490e127adbc987ee9f2e0559bf4068_JaffaCakes118 | Triage

Sharing

General

Target

60490e127adbc987ee9f2e0559bf4068_JaffaCakes118
Size

231KB
MD5

60490e127adbc987ee9f2e0559bf4068
SHA1

8f69a71f7241fa769c7ed23cc1a8b1fcd68cc138
SHA256

de9cc3e198d95548aeba7130ae06004265f694ec90078f56a12c326ecf32e503
SHA512

6254b2cac0126ce4be46bdb678045cda5e56e4fb5cc1ed64f5efe2c6189c1b4f6023f9489733f2d2446d5797b54ff47cfbae12c20b1ca6fa02db7ba46d2b78ed
SSDEEP

6144:sgM1G8nYU3LHzfROoej1+KGTxXuSmuWbyA:shX7TfMQTurW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60490e127adbc987ee9f2e0559bf4068_JaffaCakes118

Files

60490e127adbc987ee9f2e0559bf4068_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ