060e0b395e5e3b94ce0354ea0e96f72a_JaffaCakes118 | Triage

Sharing

General

Target

060e0b395e5e3b94ce0354ea0e96f72a_JaffaCakes118
Size

80KB
MD5

060e0b395e5e3b94ce0354ea0e96f72a
SHA1

93132db79acf34a34ba8657d10fb08334e51add6
SHA256

dd79f3b33806d83844afbe4605641d0a57857b06e453f2b71238093147fab27f
SHA512

01b7ce3753a25bacb364579b3ce8342663e16d9fec57c9dd9723005dfaf99d2760ff8ac1d76530db76facc8c61378b07bb668b5293b2e796c7523dbb13f84ad9
SSDEEP

1536:E3VNYIEoDbYQo/2eDFvhXIOanToIfS1y+rOM26ZCYE:EDLEoJOvh52TBfSXOD6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
060e0b395e5e3b94ce0354ea0e96f72a_JaffaCakes118

Files

060e0b395e5e3b94ce0354ea0e96f72a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a445883e81f50ca77857fddc1854eb41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetStringTypeA
LCMapStringW
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW

advapi32

RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ