60e80687957b49d893a905b4e8e846ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60e80687957b49d893a905b4e8e846ba_JaffaCakes118
Size

82KB
MD5

60e80687957b49d893a905b4e8e846ba
SHA1

463885fc7c688e10fc8151b910ec4c3637232d88
SHA256

7b90cc93aac2722a5097a04ffbede8540f18ef5bb9d70553d9a1df9ffa61d907
SHA512

cde5e1ec66ca29446e3b3a68a886880a355c09ef477e756082ef59c8f4b3fe647f46254e9a9524cf2856d04cb5011cf1e1025533dbd56bf7ef24739412aecf3a
SSDEEP

1536:Qry/W+dGV6DXVt9liHO61PsEVAB2vuHj5EmyKu+umI45sOlC:Qr+lGVcxlA5DABszK9CrO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60e80687957b49d893a905b4e8e846ba_JaffaCakes118

Files

60e80687957b49d893a905b4e8e846ba_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 46KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ