60db849fe17cdd771995fb1dac42c66c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60db849fe17cdd771995fb1dac42c66c_JaffaCakes118
Size

883KB
MD5

60db849fe17cdd771995fb1dac42c66c
SHA1

5a5e659e9d09633715e87e9160c7955df7602855
SHA256

1f757ac3e499aa8bfac1f271caa681c5c872b7d840ee123be70ec77423bf8806
SHA512

d47bcf8af10a4db66c27922c38796ec2ac6bb2c02a01ed45785cf3f2fe1958f4dbe98c1326e0bb198d61b9766b6fd5033a3a91430159b76c3a28af585a56d96e
SSDEEP

24576:9xo8LuxvH6C2Dsnzegz2E6ZlJabjFlG0GLFO8h8uxGZsXRY:MeD2CEneLFO8SMcsa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60db849fe17cdd771995fb1dac42c66c_JaffaCakes118

Files

60db849fe17cdd771995fb1dac42c66c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.timwmb
Size: 3KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xga4k0
Size: - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 404KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tss
Size: 848KB - Virtual size: 852KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE