60f420808d81b3ca0422b097d8c336b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f420808d81b3ca0422b097d8c336b2_JaffaCakes118
Size

136KB
MD5

60f420808d81b3ca0422b097d8c336b2
SHA1

f1f6ce5755dba964e000d5eed70c3c14826cacea
SHA256

63d57e76005a926d76b2933730eff880ab22a3369b41ddddb7d697d29986a3a4
SHA512

10e36638fc24976a1f6064f8c63d70425ba80684633ca17b590aa24289e4c80bf1a0b634793512df6d4a34b1ef0021c63e3e77f0fa3a962500200b991172640b
SSDEEP

3072:e9OOLFY7REId9XnzTyY3O+3yntitVaBTuGMHnvmiV:e9OAFiTLzTyY++3bVwTRMPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f420808d81b3ca0422b097d8c336b2_JaffaCakes118

Files

60f420808d81b3ca0422b097d8c336b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a616d818a5d8497b95a79b62ba51db6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

DeleteMenu
CloseClipboard
GetWindowRect
FillRect
EnableWindow
ReleaseDC

gdi32

GetDeviceCaps
CreateDCW

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_XcptFilter
_except_handler3
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ