60fc49e1c9151c61fd45bc3211dec3ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60fc49e1c9151c61fd45bc3211dec3ee_JaffaCakes118
Size

2.7MB
MD5

60fc49e1c9151c61fd45bc3211dec3ee
SHA1

8e67b8e42c656d9ccc6a4a72d3b93c1bbd346bdb
SHA256

f8dbc79d40ffc3bf4c5436dd67823084062cead94e35b2c5e92db4a7c5c2cc77
SHA512

56fb6989945b75d3d378074b0f6961bfbd4bf1839763995eeb5fc008ac4635a4a8c2efefa368e161b259667fbc426014066c646223c1aca7a5a8b949ee7523c7
SSDEEP

49152:Gxau3GuQ6k7Ko53oCvf8KL0pGseuON0bqUGkb0qpTF2amZWHX:GxaqGD6ZaYCfpopheuOQVuqXoZWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60fc49e1c9151c61fd45bc3211dec3ee_JaffaCakes118

Files

60fc49e1c9151c61fd45bc3211dec3ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9d32b8ef82b52df87b6590166c50c62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 2.7MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE