60d226bdfddcc89da19d505b2c74facf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60d226bdfddcc89da19d505b2c74facf_JaffaCakes118
Size

118KB
MD5

60d226bdfddcc89da19d505b2c74facf
SHA1

74acf327a0f0fe1913d63641c7630cb8497e85b7
SHA256

b8b3c1e63c9c27e4719b6e82700e57f250144806e076601023f8585b1e6519e4
SHA512

94664805038d28df2a174d290b9bb76bb8469c6701632a3af42b65922d5fe08400775173f09f8ebb0fd81bc28975dcdf6a06b89de05a4c6f503d3c0b0669f123
SSDEEP

1536:eTo1pSyzFIv5x4LnpSkY5E4Eb6QBxBBa0XH1mGcJUsYrDYxMBxn+PXRg:eTo1pSuWvj4zz4xwva88zYPpx+PXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60d226bdfddcc89da19d505b2c74facf_JaffaCakes118

Files

60d226bdfddcc89da19d505b2c74facf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c8750e03ef3c7ddf04fc81f8f1fa04f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
GetSubMenu
LoadStringW

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 113KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ