60eed7a7c5f4f4aeace594e2e4d180a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60eed7a7c5f4f4aeace594e2e4d180a0_JaffaCakes118
Size

126KB
MD5

60eed7a7c5f4f4aeace594e2e4d180a0
SHA1

8532bf198cca3e789494dfce345ce24cff5f5eaa
SHA256

5280fa98dff7c2ee6721ca2a059ed837534cee8bd5109a6b0d5d98df16fa4ecb
SHA512

a75df6d9a566e2c2d08054c7882d029e8bb1cb39bd32838ba69e4492d11df79c71bea6585685f53cc38ccb207fe9c2df5ada24aaac6cb54ac44126fa640e2b14
SSDEEP

3072:WULARJlsUaOGXq8ogovAzDk6GdgAyeXJC6Nuj:NLAR7XaOF8kvAzDk6GWAyeqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60eed7a7c5f4f4aeace594e2e4d180a0_JaffaCakes118

Files

60eed7a7c5f4f4aeace594e2e4d180a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7c16bc7a559054678ba7309b9c51d37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetShortPathNameA
GetModuleFileNameA
Sleep

shell32

ShellExecuteA

msvcrt

fclose
fwrite
fopen
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_unlink

Sections

.text
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE