60895765ce624f2cd8a638965ede0c6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60895765ce624f2cd8a638965ede0c6e_JaffaCakes118
Size

63KB
MD5

60895765ce624f2cd8a638965ede0c6e
SHA1

4adf90480e55d251dd9be57f47cb8fe85924f086
SHA256

d1adae204f734b3fc34d42d814a157c57dbd13e8f7ee9bdbaf956d5f85476c53
SHA512

2d2568a4ac2f716e94ba936c70301ecfa47aa8d9ff3e59981b76805e7f6ce399fda5671e268f84b95f3a0bd62abfd09f5b4ee40a3bac41b3c66a1fb3d4bfefb9
SSDEEP

1536:KwWuzK23aOvLaRFaYL8RCfP6cyaEph+UbbkCdqDFfDkFI5:f2xSabWCf5ypfkCEx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60895765ce624f2cd8a638965ede0c6e_JaffaCakes118

Files

60895765ce624f2cd8a638965ede0c6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

820fa62fd661f0160577ab81e2f7ddd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
VirtualAllocEx
PeekConsoleInputA
GetConsoleCursorInfo
SetConsoleLocalEUDC
_lread
SetCurrentDirectoryA
CreateIoCompletionPort
ReleaseActCtx
HeapLock
GetWindowsDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE