60aa9deef71b133846e4849e493ce488_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60aa9deef71b133846e4849e493ce488_JaffaCakes118
Size

1.3MB
MD5

60aa9deef71b133846e4849e493ce488
SHA1

e0898f90126f2afb93f84f3812be6c2e930d665d
SHA256

5f1bc68b67231fa082229ac57719d81b86fe2bfa7e08af36f86ed1d84d2eb046
SHA512

9645e6e4db444c0109240b4d985cfdea44edcbafe24c3d0db02d135addf6b4d9d60e0f142abaecd4a7587b0eb96ba4f919f7d021b7f1f07d577e33b40a45de0d
SSDEEP

24576:q2UZm9eoFhPf2d5Jl9VzBVsds43Y0v32C2zh4PqkxrBcF9Dgh3M9IKVWJW9xud6R:q2jbPf2d5JBjRyN32CUh4ijF9sh9+bug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60aa9deef71b133846e4849e493ce488_JaffaCakes118

Files

60aa9deef71b133846e4849e493ce488_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ