60a829481051f0f9f0249ee9e90e8b86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60a829481051f0f9f0249ee9e90e8b86_JaffaCakes118
Size

151KB
MD5

60a829481051f0f9f0249ee9e90e8b86
SHA1

c6f8b61f8ca1b904086ec33d39ef811db406d3bc
SHA256

c11256d02ef3354da5ece691f29eee05f66883424f3801d46bc25764a345b883
SHA512

90b4eb12bde12d9ee88a63ba689df8ec86693aa36f4fffaa455379dc73ed9c7917406a16bcff35c4161c3fae0e72915d3994c6b9ecbf0c14b177c619e1497951
SSDEEP

3072:lyL/TmkOUP9H3RGJfsGydgeBJDJhdSTfxemszoR/kRNOmZTGErb:8vmkOyMJfsGPKJNafs3z7RNNZr/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a829481051f0f9f0249ee9e90e8b86_JaffaCakes118

Files

60a829481051f0f9f0249ee9e90e8b86_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ