60f8968040a211550a5662ddbecd03f8_JaffaCakes118 | Triage

Sharing

General

Target

60f8968040a211550a5662ddbecd03f8_JaffaCakes118
Size

16KB
MD5

60f8968040a211550a5662ddbecd03f8
SHA1

5a7039e8e4968c15a08006019854ff585bb1dac2
SHA256

66258b1884681a7db40e93301845d2b10dd6ef85943cef2714da7201926833f8
SHA512

59d458b13126708ca180b5cb3827cfb5edf8e8fffd3f4a9e2523a3108afd3aa71a278b011fbd2c6f988a094ef3e670b38dd894ecdff1570b78bee6859dfbc475
SSDEEP

384:JAm47nZHM/yP9Pcp3pa9FLS30hQhi6t/1dzy5N7Jv2GwmuD:JA37p9PGLa56Vy5NVv2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f8968040a211550a5662ddbecd03f8_JaffaCakes118

Files

60f8968040a211550a5662ddbecd03f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bc46e5803a7048db7ee02260df87515

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ