60f067d21b1ba5e454186591101f3e45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f067d21b1ba5e454186591101f3e45_JaffaCakes118
Size

576KB
MD5

60f067d21b1ba5e454186591101f3e45
SHA1

793d50bd8a862a5cd86fe50572c2b19840c9c5da
SHA256

43cf1ba2c3526c5744483b96d84a0ec78d102e6bf4715e60b354cdc37caf1479
SHA512

ae5d9982ce7b8d613177a33cf5755f21fd5e6555159af40d84239ae81a76128079c79cb6179f84545f3c24a961ca92d3af8219ba25b9c8feb5331b50eb46b8e3
SSDEEP

12288:ZyB/T9cpuYvo3rTIIkOA8kv/RzftAzZZeMFEvBcAjSir:ZI4uYvo33zozfkZVFExSir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f067d21b1ba5e454186591101f3e45_JaffaCakes118

Files

60f067d21b1ba5e454186591101f3e45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afa71f1a0a7dc6bda95bb73b1ec86412

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__dllonexit
_onexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
_stricmp
memcpy

kernel32

WriteProcessMemory
GetModuleHandleA
GetModuleFileNameA
GlobalFree
VirtualAllocEx
GetProcAddress
GetStartupInfoA
CreateProcessA
GlobalAlloc
SetThreadContext
GetThreadContext
ResumeThread

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hao
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ