0e5e9ddffa36ffa6ffcb995176d490ac_JaffaCakes118 | Triage

Sharing

General

Target

0e5e9ddffa36ffa6ffcb995176d490ac_JaffaCakes118
Size

157KB
MD5

0e5e9ddffa36ffa6ffcb995176d490ac
SHA1

69f977f8f2ea4284ad3c060f9751d8a589ac686c
SHA256

a2c6686cde178f682fa42530fc68b66ef6eeb560bfd45101c8ea07f603ce5327
SHA512

b9519d90264cc9caf28c83830dec70b538528bdbdcd70ca081a79967ad8c8b5ea5c3ba3d4e264a659925a864dadcde1fa549783e8189b213cfcafbfa06b3a889
SSDEEP

3072:wwyyzSV0TEgu0c0rCKvHDax2sx1RhzfYPfan0ytwL8B00wNHFw7BC:NzS2TEgu0cLIovTrn0yqL8B0FNaVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5e9ddffa36ffa6ffcb995176d490ac_JaffaCakes118

Files

0e5e9ddffa36ffa6ffcb995176d490ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6e2f0534511aae53f3c1857c32d21eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReplaceFileW
GetStartupInfoW
Sleep
InterlockedCompareExchange
InterlockedExchange
GetProcessId
GetCurrentThreadId
EnumResourceTypesA
GetTickCount
GetSystemTimeAsFileTime
UnhandledExceptionFilter
ExitProcess
GetCurrentProcessId
IsDebuggerPresent
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess

shell32

ShellExecuteW

user32

EnumDisplaySettingsW

clusapi

CloseCluster

comctl32

InitCommonControlsEx

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ