60f07a1db9a79f31d5b3aefeb8430273_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f07a1db9a79f31d5b3aefeb8430273_JaffaCakes118
Size

396KB
MD5

60f07a1db9a79f31d5b3aefeb8430273
SHA1

3f2b04a8cc4af7b88db48f88d60dd8a8de3c903f
SHA256

47867261f85d724132f8ea63063e853f96050e8ee132f60b3553313e55f282ff
SHA512

34e9154e2e3439760614b105b697769eec2bce982112067519e65731b8b5d6003c171ab71975614e159be19b335e0d33868189d6458b20d8e353203227df547b
SSDEEP

1536:O9y/45cS0HvNHJnmRgjGhvV3SIgJ/h4v5cS0hvNj:O9T50HZ1mR0UV3jgJJw50hJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f07a1db9a79f31d5b3aefeb8430273_JaffaCakes118

Files

60f07a1db9a79f31d5b3aefeb8430273_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

6w1|f
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ