60a22c04b0158ca1f3bf6bff675df79d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60a22c04b0158ca1f3bf6bff675df79d_JaffaCakes118
Size

836KB
MD5

60a22c04b0158ca1f3bf6bff675df79d
SHA1

ea4f11861da729aa7c2e4a71b9f120a4969388c2
SHA256

65c040d75ccedf534945dcacdf714c3c3b49e25d0bd41dc48385035ec4dc57a3
SHA512

985eae16a9e19ce422612f959c5f3d9b0f2c89fa334342032ab658e0c14bf3eeffeb55512c4281fe3457c1a245312cd9b1665d4c3e91ca596bfa467efb765b72
SSDEEP

12288:UCGonA+dQ4XL98888815o/Smrir/cnNBzTJFx2NBzAxzxSVelYsYFmPa5ceB6:UCGYJN988888156/r8yNBzPxCpk1Y6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a22c04b0158ca1f3bf6bff675df79d_JaffaCakes118

Files

60a22c04b0158ca1f3bf6bff675df79d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c95707b7fd1c9e427497abd4c2a1de4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
lstrcatA
CreateHardLinkA
CreateToolhelp32Snapshot
MapUserPhysicalPages
SetLocaleInfoW
CreateTimerQueue
GlobalMemoryStatusEx
SwitchToFiber
UnhandledExceptionFilter
GetDiskFreeSpaceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE