60de2720a6f480a7fac5f58adb928585_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60de2720a6f480a7fac5f58adb928585_JaffaCakes118
Size

15KB
MD5

60de2720a6f480a7fac5f58adb928585
SHA1

023d60d6538913164ac19e00cfc645c531500f90
SHA256

0d11308b4e994d7acc021273df9046d3058777d6f852d499f88459f09caef050
SHA512

e5f271e8ed085f5a837899beb9a4a01851ff0d92f0b1ccb6fa3510c1b553e9c71afdba8c0c660ae5af197c5d2e01ef7aa58d79df4c6993e0212b84bb9269df1c
SSDEEP

384:pQC7iIfcSZvU1pk0W1bzpVQgAA4CHC6hhbq8wShrViAOL:1f/UMxdpmtuBbiwx2L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60de2720a6f480a7fac5f58adb928585_JaffaCakes118

Files

60de2720a6f480a7fac5f58adb928585_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f4f6be69419048b68add3b9231c0271

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetTempPathA
lstrcpyA
lstrcmpiA
CloseHandle
CreateFileA
CreateProcessA
DebugActiveProcess
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadResource
LockResource
OutputDebugStringA
RtlZeroMemory
SetLastError
SizeofResource
WaitForDebugEvent
WriteFile
lstrcatA

Sections

.text
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ