61c0b5f0f95c0f2e571728a4dd1a62b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61c0b5f0f95c0f2e571728a4dd1a62b3_JaffaCakes118
Size

528KB
MD5

61c0b5f0f95c0f2e571728a4dd1a62b3
SHA1

3cec447541273665495d1bc9205831394a3969af
SHA256

b5ccbc43a8518e8798a43197ead18c75fe6cdb563d0bde35047274661d2882d4
SHA512

f6a01f744241c951f175d34f6c380e52ade29f9f2b525ccfb82d426efd7e9b8f46a21b9e58b931813b96479e1f465be3b78dbfcb03b650c17ec0c808e40fd798
SSDEEP

12288:P0oK1Ay95TKQx9Xrk+m5c2TqSO15KyfhHB7OgNpIRR3a74:BK15TTLrk+mq2O1oczOmORR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c0b5f0f95c0f2e571728a4dd1a62b3_JaffaCakes118

Files

61c0b5f0f95c0f2e571728a4dd1a62b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ