b60cbe171f2499acdd4fc06890f09630_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b60cbe171f2499acdd4fc06890f09630_JaffaCakes118
Size

21KB
MD5

b60cbe171f2499acdd4fc06890f09630
SHA1

12f169bd725a643f237021ca5c6ea22b9912a77d
SHA256

dcea324fa1e7793311665457368ed429ac6b1b3577b62e3777cffd6aa89d828e
SHA512

3b1138c1256c9e1f2e5ee828d98ce6e6639b283f1ab5be6297f2630daaafc4b81d4f0efea3100c20e41ea8e606d83ddeddca5db988b57475aa1580de48c926de
SSDEEP

384:C9ZDvNkuveQcHmDU5ZkjVwkbywVpbau6ip:kZDBv5lDETkJV9L6ip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b60cbe171f2499acdd4fc06890f09630_JaffaCakes118

Files

b60cbe171f2499acdd4fc06890f09630_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1eb21e4546333a2b7b1cba6229197d1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSetSettings
SHRestricted
SheChangeDirExA
SheGetDirExW
FreeIconList
StrRStrW

user32

CharLowerBuffW
CreateMenu
DdeAddData

kernel32

CopyFileExW
DebugBreak
CallNamedPipeW
AllocConsole
DeviceIoControl
EnumDateFormatsW

gdi32

SetICMMode
ResetDCW
SetWindowOrgEx
RoundRect
Rectangle
StrokePath

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE