60fe08889dcb86b836f7040e8a88b5fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60fe08889dcb86b836f7040e8a88b5fc_JaffaCakes118
Size

746KB
MD5

60fe08889dcb86b836f7040e8a88b5fc
SHA1

9fc2ee80d7b64439ec954d2d8b96dd108db9a5c4
SHA256

2955bd2c547aafcd9fb2b545f1ee5930ee2f89ba38e94e3093877674c97f4f66
SHA512

761e84ef04c69d93b9a7a01a0b1ff0b42e06b5fbbe6bcf3f4906397db6e161037f4fd77815b77a273a86d6e56f2234b9b2fb706e60633e90fbef5b855e3a6fc0
SSDEEP

12288:3pa68fhqRlpLpDy5PU7piV1wD+kKyQv9If5GlUnsznGx0VilOZkkSkZtw5aVB:3pO5ophy5ipjqt9IPsb3ilOZCoM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60fe08889dcb86b836f7040e8a88b5fc_JaffaCakes118

Files

60fe08889dcb86b836f7040e8a88b5fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ