60d856b6953102ae1916eab3746527ae_JaffaCakes118 | Triage

Sharing

General

Target

60d856b6953102ae1916eab3746527ae_JaffaCakes118
Size

2KB
MD5

60d856b6953102ae1916eab3746527ae
SHA1

eb7969e37596065709161f40bdb40954c4ad1c95
SHA256

08511f8201901cd8f2bfe1f961663179f60b73e78c6f444c5e2d6e09bac6cfc5
SHA512

6a0f0533a58e405fa8b4d4095a683d3a583c22a7d91dc70b9304d5ddcc2a064355d4cef101e7baaa113fb9a5203c33bffd8c7924fc009624353f01fa2fa70c78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60d856b6953102ae1916eab3746527ae_JaffaCakes118

Files

60d856b6953102ae1916eab3746527ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98fb6937e31172bdc580c842829621b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

msvcrt

__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
_adjust_fdiv

kernel32

GetStartupInfoA
Sleep
GetCurrentProcess
CloseHandle
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE