60986b8b4fc51d6ad06cc3cecbba4341_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60986b8b4fc51d6ad06cc3cecbba4341_JaffaCakes118
Size

72KB
MD5

60986b8b4fc51d6ad06cc3cecbba4341
SHA1

f827a1613df437020260f356a6be77ce7d7f5d65
SHA256

1eedd8e7e54c8be742de70f098277795262d056868ecee1b5f4fdfddc97244b3
SHA512

bb912f67777b0729f18914890030584762db6c9339e62cdd4366aaf1e250048f3013f4b8f8fd848f3576a05738d0839688f7d272706d0e206bc15efa1d79c4b6
SSDEEP

1536:gn7YdKS3zCTKGXZ6RrSAVystf+ke5i1exvCZ/5xgt3:5dNzwXZ+NVysl+k8WexvCZ/bK3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60986b8b4fc51d6ad06cc3cecbba4341_JaffaCakes118

Files

60986b8b4fc51d6ad06cc3cecbba4341_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e90e97a0e99c0d835217d178b77efe00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE