60a21bcd0aa150bbfd7cbb37c5c23bf7_JaffaCakes118 | Triage

Sharing

General

Target

60a21bcd0aa150bbfd7cbb37c5c23bf7_JaffaCakes118
Size

508KB
MD5

60a21bcd0aa150bbfd7cbb37c5c23bf7
SHA1

39fea85d49481adac6057f5ef0bdc81b54201af5
SHA256

2da06b6728650058aedf1655a6280de9e00feae3cecbb35cbbc16b5ac579b9a1
SHA512

b3b69b2efa6507203228cbe82cc9c643bbdb36a9fa82f697ed409e07ee6b1f50f7bb372ac6166db6a2def4486eb79adb06475abcf808795cf6d703b6914ed155
SSDEEP

12288:kQ/r5AStl+jOHRk2YQN0gfqB2Se20t/KYp5UXPHu41gP51DdbMCXYC9T:1z5ASf+jWRvcB21tpp5UXPHCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a21bcd0aa150bbfd7cbb37c5c23bf7_JaffaCakes118

Files

60a21bcd0aa150bbfd7cbb37c5c23bf7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ