560e6e8d018bd865f4881c728e2f6522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

560e6e8d018bd865f4881c728e2f6522_JaffaCakes118
Size

1.9MB
MD5

560e6e8d018bd865f4881c728e2f6522
SHA1

f05f3d611e4b6c1b44dd0a477a482d7616896d5a
SHA256

34f3becc695612e39c42e477bd72cccfb8b7f314aeca93e445a6065cd8c5ce25
SHA512

4355f6c938b16d3fe26c7b18cffd66003227f7f75905ed3f94b882ef6d45fd4a85aeb10b43e36081616678b67901684669a794932d89d80e434895abaf03ae6e
SSDEEP

49152:b3CCPaPT5JDCyPmWGnzrQFJSY/nEiJOcqtBTi+irfpklxZyHHEknQ+kLJW9BU15z:H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560e6e8d018bd865f4881c728e2f6522_JaffaCakes118

Files

560e6e8d018bd865f4881c728e2f6522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ