60ce39f6662572ab34e386e7e3a7c3f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60ce39f6662572ab34e386e7e3a7c3f1_JaffaCakes118
Size

16KB
MD5

60ce39f6662572ab34e386e7e3a7c3f1
SHA1

4e41f890012405c487cb8d469106e3c87727fe02
SHA256

25da0f5660dd4f2be07dc9072d390c53ab191249d99fc101e9699b7d673fc5e2
SHA512

0d48d635f3120faeba0b1b1fb401aae0d476470447ef1f57b1e3c0f6340731fa3d3a57297255b3eaf4953812ca9e2feed359a707e25b1aca8a85d815e213c18f
SSDEEP

192:bsCf9XUnGc1Zl2+VAfNxl1THs6xgzgVGjPlRqL76InQAlKhFo2A6Z0/IuWnCOlas:bsCf+GcMJxDTHfRmyN6PuWk5mLYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ce39f6662572ab34e386e7e3a7c3f1_JaffaCakes118

Files

60ce39f6662572ab34e386e7e3a7c3f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5554792a560feb0c43ed513978f379bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__main
_impure_ptr
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
free
malloc
realloc

kernel32

GetModuleHandleA

Sections

.text
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE