f2845f1ba670acd9fdf868beee88ad86_JaffaCakes118 | Triage

Sharing

General

Target

f2845f1ba670acd9fdf868beee88ad86_JaffaCakes118
Size

162KB
MD5

f2845f1ba670acd9fdf868beee88ad86
SHA1

b8d27080555d7a0a0117db9265820c79e61c0dfd
SHA256

f5af9d15bdd145593032f2ffd44df2758ae3be5800102eb6b87952574b464557
SHA512

d081842178a78081dbb865242367fb5b5b9fc41ba33592568b995cabf0de0e96a5f55f5ba3fa176d5ca021d29830ee57b36489ceb85a7f94e8f97d28dea14b51
SSDEEP

3072:wTY8ajOKJeJ6oR7D9lWG3S+NdrWX7e9svu7CxDaGErC2Q9H:wk8oHcxhRRCwdry7MeRxOprC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2845f1ba670acd9fdf868beee88ad86_JaffaCakes118

Files

f2845f1ba670acd9fdf868beee88ad86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff2d6375a8ed902f2f4224434b056946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

clusapi

CloseCluster

kernel32

ReplaceFileW
Sleep
InterlockedCompareExchange
TerminateProcess
GetProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
EnumResourceTypesA
UnhandledExceptionFilter
InterlockedExchange
SetUnhandledExceptionFilter
ExitProcess
GetTickCount
GetCurrentProcessId
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcess

user32

EnumDisplaySettingsW

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ