60b82654d119d7d21ccf161b5545f337_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60b82654d119d7d21ccf161b5545f337_JaffaCakes118
Size

112KB
MD5

60b82654d119d7d21ccf161b5545f337
SHA1

bbd83f7e4642ebac5405371900817d4fb759fce0
SHA256

da72c35ef6084d3ac4c3103b5f5dd02bfd539e3facbd060d1a59b7a5396673d8
SHA512

7af81557ea6689f4e51f3d26fa4baf7a1afcaf8d38f0548b8323c8addb39ef2ac27cad44687f4fc515d3a24b412851c3c6c6d373ef6257fef762b0e75b650eed
SSDEEP

1536:52wF3HKHaKG+TwjXmsttPFl2RQufbVIs89IKzQueI4NV/PF3g8lzQ7oq5d:57KxYXms/7dufpIs8Uu94NFPF3hlid

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60b82654d119d7d21ccf161b5545f337_JaffaCakes118

Files

60b82654d119d7d21ccf161b5545f337_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a55ea40f23d9e5926813f8a0b8f02510

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
Shell_NotifyIconW
Shell_NotifyIconA

kernel32

ExitProcess
EnumCalendarInfoA
FindFirstFileA
LoadLibraryA
FindResourceA
VirtualAlloc

user32

DestroyMenu
DestroyIcon
DestroyWindow
DestroyCursor

Exports

Exports

sfECoMYnhpoYeT

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 567B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text