f60ac7766b8dd5b23d7a780da4ddc404_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f60ac7766b8dd5b23d7a780da4ddc404_JaffaCakes118
Size

72KB
MD5

f60ac7766b8dd5b23d7a780da4ddc404
SHA1

f0a32b19604f0eb536d94f483ff2d6d5eb7bf356
SHA256

1931a7f21e75d56921199db9d4e52cec23d834df0d46525baeb9fa84de6a0fbd
SHA512

dedbf9785ce22b8dbb768af3b46b89a96faa6104337ac817fe5f010f7419e3ae4b6c3c0073a1f861cfd45000d986cbfb76c4281c00ffc6c8b39eda6f33fc00a4
SSDEEP

1536:6IT6Ml5LglPJHq2GNjl1fNehxZ0ASorbw0A8VkB51:9qlVq2YkhxZUorbwpH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f60ac7766b8dd5b23d7a780da4ddc404_JaffaCakes118

Files

f60ac7766b8dd5b23d7a780da4ddc404_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ