60f3ca5e05c827636b0af0d6ffe807ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f3ca5e05c827636b0af0d6ffe807ee_JaffaCakes118
Size

293KB
MD5

60f3ca5e05c827636b0af0d6ffe807ee
SHA1

1b548936fe9a3837cef395588fc05f3e7b545ef9
SHA256

6f4d1fa99eabd6320727ef3b9d4870bee74e8c5a8d303e01e22b4ac5e8622f0e
SHA512

0149b09da886c3e246d1511b8d6ced2cb9f544a589e59149790aaa95b2f8e9161f0cc550f43e3b3bfb11758453a53b7c4ff31e59e689e50e37d733889d4aaaf8
SSDEEP

6144:x4zwEbbJe+GTL9MiDR6wDvaUHtfdd+Ru2:msE0ZxMiswDaWP+Ru2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f3ca5e05c827636b0af0d6ffe807ee_JaffaCakes118

Files

60f3ca5e05c827636b0af0d6ffe807ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\kawano\DualCard\Projects\HalfAuto\Source\trunk\latest\HID_service\release\HID_service.pdb

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE