2435cd7fe14e797322c4d90a876003bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2435cd7fe14e797322c4d90a876003bd_JaffaCakes118
Size

131KB
MD5

2435cd7fe14e797322c4d90a876003bd
SHA1

9a9442198a70755afbed20c102ef208afa3f1140
SHA256

9a361b13d2b6243d55c389e6c982d3f1ae09afaf10dea78210937e36f6630407
SHA512

26de9ac882bf80863e088f2bf462be888eed5bc60b6cdf58f97d1adbbf0cdf0509f4e7c6739b968363d23153d0c83fb5bc6aeb71ea237a3c7e8c72aa87af12d5
SSDEEP

3072:Zhek7wFoBnZDKmHAUtAME8ev+gF4Y7EDbpKwUyjGU0jx:ZXmOZPH//SV/2dKwVBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2435cd7fe14e797322c4d90a876003bd_JaffaCakes118

Files

2435cd7fe14e797322c4d90a876003bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb9ae7f69ec9b4ba5e8c46ac3f8f212a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

TerminateThread
QueryPerformanceCounter
GetStartupInfoW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateIoCompletionPort
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
InterlockedExchange
EnumResourceNamesW
TerminateProcess
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
GetCurrentProcess

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

clusapi

CloseCluster

shell32

ShellExecuteW

user32

EnumDisplaySettingsW

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ