60853531bc7b7d90a7a9b87e0257ebb1_JaffaCakes118 | Triage

Sharing

General

Target

60853531bc7b7d90a7a9b87e0257ebb1_JaffaCakes118
Size

293KB
MD5

60853531bc7b7d90a7a9b87e0257ebb1
SHA1

e226cd97a3c740b36ecdfef999d50e5dd9925a13
SHA256

4016dbfccba37fc721b928a427c42699836dfb6b0c9f04e33e8e6ed2a39bb5aa
SHA512

5307d9693353ac721054a3b647042ddb1f5382112b2c729a27fb449a6f8934f88c4b195d8c39e1172acdfc972e2d9a6cd5e89e81724d6f4fa428534638da3ee9
SSDEEP

6144:ycKwdFyIPRppWhMk+jjjovO94R0dvfDQ:ldFrLrDov41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60853531bc7b7d90a7a9b87e0257ebb1_JaffaCakes118

Files

60853531bc7b7d90a7a9b87e0257ebb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae80e04a4bbd6c9e1ed4a21b11a30c41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
EnterCriticalSection
ExitThread
FormatMessageA
GetCurrentThread
GetTickCount
GetTimeFormatA
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalSize
LocalUnlock
SetEvent
Sleep
TerminateProcess
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrcmpiA
lstrlenA

user32

CharUpperBuffW
EndPaint
GetDC
GetKeyState
IsWindow
LoadBitmapW
LoadImageW
MapWindowPoints
PaintDesktop
SetFocus
SystemParametersInfoW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 279KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ