60c4887d7f8664f4b74ca8ebaaeb1fe4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60c4887d7f8664f4b74ca8ebaaeb1fe4_JaffaCakes118
Size

93KB
MD5

60c4887d7f8664f4b74ca8ebaaeb1fe4
SHA1

2858e388da4c64ebe3ee9ef8704a41bbeab1d6e8
SHA256

a83e2b1626beda330cf4401414d2c20577b9bb6f9829e66703b35236e8c65886
SHA512

a24f5ecd3ee1873167c7c52435dfd7d145d92b731ed27d04ed5022cf1bc099ddef0647e1b5f7ec12756c9702b2cc9ab50f7daa5ea3bb4b90bccefbaad87e01af
SSDEEP

1536:rmPIcSnHJeSlEaivYtWklNs6hDSDyyKw2ZbjFDuPBNg+uYvb0xlCsofGHb8dctVR:rmAcSJ1lOY8uNsI7NXlYDmMso2ZtVyC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60c4887d7f8664f4b74ca8ebaaeb1fe4_JaffaCakes118

Files

60c4887d7f8664f4b74ca8ebaaeb1fe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

baca414d331d1a694871e3bc5d0a6582

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DefDlgProcA
CreatePopupMenu
CreateMDIWindowA
CreateAcceleratorTableA
CharUpperBuffA
CharToOemBuffA
CharPrevA
CharNextA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcatA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
SetLastError
RaiseException
CloseHandle
EnterCriticalSection
EnumResourceNamesA
ExitProcess
ExitThread
FindResourceA
GetDateFormatA
GetLocalTime
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
InitializeCriticalSection
MapViewOfFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE