60894eea91046deadcb4c9018df0aeec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60894eea91046deadcb4c9018df0aeec_JaffaCakes118
Size

63KB
MD5

60894eea91046deadcb4c9018df0aeec
SHA1

9ffec6253761a80be7d7724e25df01c49144cbd1
SHA256

0d45ae79070e9c0fecdc90398fe90d18d247295127fdd550fb1545e654e0a17e
SHA512

4853a0be46296b2a49cef3a1373c4ae14d642da13bc8d6fb41c6b8570bdf41677602fa37fee469827977c4ab02446c7e7132fdda55cd71ceb70c7ebf07c0b04c
SSDEEP

1536:cBHCfFO124K8PVVeUpD/7B/5q60nPiBH1Vv6aE:cUfFO124XPXeUpD/7d5CC2aE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60894eea91046deadcb4c9018df0aeec_JaffaCakes118

Files

60894eea91046deadcb4c9018df0aeec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aee7415b99af5c2a1a70d080169762ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
GetFileInformationByHandle
CreateDirectoryA
CreateWaitableTimerW
NlsConvertIntegerToString
EnumCalendarInfoExA
FlushViewOfFile
ReadConsoleOutputCharacterW
Process32Next
GetLongPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE