60ce279127ed1eeddbb2b0ba2ec3b235_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60ce279127ed1eeddbb2b0ba2ec3b235_JaffaCakes118
Size

76KB
MD5

60ce279127ed1eeddbb2b0ba2ec3b235
SHA1

24e8b39bfae0f0d42aa84995a72512914c54f3d2
SHA256

c1816252da406464c1b3246623ec65e28f76f3d9dc7b03f1baae7253764c4c3c
SHA512

498a03598b0a25e1934bed4684c22c4b48af77968a6e33b2b666e9c075f14bb91effef03b3733d0707fcf67f4ba84e54b1857d9ca4f5ab61eac56d4d1afb3494
SSDEEP

1536:4vzrtaDnEJewYe7+CerT/8OuFBXd6Hlqcq:sNWEJewzqv/8OuFBXd6Hq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ce279127ed1eeddbb2b0ba2ec3b235_JaffaCakes118

Files

60ce279127ed1eeddbb2b0ba2ec3b235_JaffaCakes118
.dll windows:4 windows x86 arch:x86

95ada69f337a6aac7263ff9853b4a904

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCommandLineA
Sleep
DisableThreadLibraryCalls
CloseHandle
UnmapViewOfFile
MulDiv
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcessHeap
MoveFileExW
GetFileType
CreateFileW

msvcrt

_except_handler3
malloc
_adjust_fdiv
_initterm
free
_wcsicmp

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ