60a5bd5da24b083aadf303c3591b1ed4_JaffaCakes118 | Triage

Sharing

General

Target

60a5bd5da24b083aadf303c3591b1ed4_JaffaCakes118
Size

67KB
MD5

60a5bd5da24b083aadf303c3591b1ed4
SHA1

415bc6073367f1552a855532907e5a596276e063
SHA256

2ee7c2bbab6cdf79d61af8e04a490d2f2cd39425d386232f4df46d2f5fce8fda
SHA512

d901d1f707e3a9dd5acce8cf3521722b5ef228cb8f9dfc0ba4fbaf2f7f66ae8765120b14e27954690493e671112741d8b00ce014cb39cc5847deeaef5758f163
SSDEEP

1536:SfrU0uG04Ew6ri5k3+cLqe7hUdBHhRK3m8r5mJux8yLK:SzoGUdim3qqmdBH7PymJA8gK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a5bd5da24b083aadf303c3591b1ed4_JaffaCakes118

Files

60a5bd5da24b083aadf303c3591b1ed4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70bf662b4b4ae29dac682f50f290f8ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLargestConsoleWindowSize
SetLastConsoleEventActive
GetCurrentDirectoryW
CreateMemoryResourceNotification
TerminateJobObject
ClearCommBreak
GetCommProperties
AreFileApisANSI
SetMessageWaitingIndicator

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE