60271ad284956ad954483832a41d43bb_JaffaCakes118 | Triage

Sharing

General

Target

60271ad284956ad954483832a41d43bb_JaffaCakes118
Size

260KB
MD5

60271ad284956ad954483832a41d43bb
SHA1

0f1080d088e2a703f9a0bf568dd24c0e9b689e6f
SHA256

a0821757dcf8e7b16eac16beac114cda9932f63f7439c466ebee1c3b64e89d9d
SHA512

6f12ec677ea5390dd118db8dd6b42b32f574870dd153a25876e8b8585cab97270f7d42cf52a95bf145872fee2ffcfae325441c30be918f330a121f9ab0d44a06
SSDEEP

6144:aKMPAWA86Ak+TJ/8NoXtwKaBDx9OghGOUZUX01BteWQLcUB:FM3A9Ak+TJ/8NIwRNz5pUzeWJUB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60271ad284956ad954483832a41d43bb_JaffaCakes118

Files

60271ad284956ad954483832a41d43bb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE