60651e24c703970ef924f8a892d62d8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60651e24c703970ef924f8a892d62d8f_JaffaCakes118
Size

212KB
MD5

60651e24c703970ef924f8a892d62d8f
SHA1

594102a10125830222eeced5bb8dd26a17706512
SHA256

964c4d2d9f380320a9036467463f61aece45a4d1447adda9b47b7a10f70fb8a8
SHA512

e2bcbba425dc9bb9a87fcce5e88db9ee5c4a61400cfe1d6ce793ef7cc9fa3a257d239e1002ba6b7802645f565dc6f0a4c36ab4471cf22910c94ec7853dd2e7d8
SSDEEP

6144:4LAeoHBbudnEgcv04AyAM9jGKr/iIyPsaV7OLVC:IA9BbudEgA0dT+jdiIus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60651e24c703970ef924f8a892d62d8f_JaffaCakes118

Files

60651e24c703970ef924f8a892d62d8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91560eb6099bb0134d2144d40bb8e2bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetFileTime
GetCurrentThreadId
WriteProcessMemory
CreateThread
GetOEMCP
SetConsoleNumberOfCommandsA
CreateFileA
GetLocalTime
GetCommandLineA
SetThreadPriorityBoost
GetModuleHandleA
ExitProcess
DeviceIoControl
LoadLibraryExA
BeginUpdateResourceA
GlobalUnfix
GetUserDefaultUILanguage
IsBadWritePtr
HeapReAlloc
GetTempPathA
EnumResourceLanguagesA
SetProcessPriorityBoost
WriteProfileSectionA
TermsrvAppInstallMode
DeviceIoControl
GetCommandLineA
ReadConsoleInputA
GetWriteWatch
GetFileAttributesA
FindResourceExA
VirtualAlloc
ReadConsoleOutputCharacterA
InterlockedExchange
CancelWaitableTimer

ws2_32

send

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ