5c228146a77a4c26a73b655b33b454b5_JaffaCakes118 | Triage

Sharing

General

Target

5c228146a77a4c26a73b655b33b454b5_JaffaCakes118
Size

139KB
MD5

5c228146a77a4c26a73b655b33b454b5
SHA1

792924c2f1c2ceff5c3d88b5a570afd57bd882fd
SHA256

58a16c6018e47aabcab45eca56e646a3591088fdd5733e44ac916acfbac60b20
SHA512

6c9afab7a31e81225d15bcfe1d3f4b39c5671c19c2426747e4b36e8f3f3c71f9645e445fa7777e9e47c4c3f2a9f70ca00cc04e8f9b62e8a1d2d97f205ce24a9d
SSDEEP

3072:VNFNiRj7gApcwR5JE8UzAHuyWtiDDBqD6qwtgQ:VNFNb+r7JDRHuyWtiDDBqeqwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c228146a77a4c26a73b655b33b454b5_JaffaCakes118

Files

5c228146a77a4c26a73b655b33b454b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc74d48d5dae4265b66654aecc4fa9ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

CloseCluster

comctl32

InitCommonControlsEx

user32

EnumDisplaySettingsW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW

kernel32

Sleep
TerminateThread
SetUnhandledExceptionFilter
QueryPerformanceCounter
CreateIoCompletionPort
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
EnumResourceNamesW
InterlockedCompareExchange
GetCurrentProcessId
TerminateProcess
ExitProcess
InterlockedExchange
GetCurrentThreadId
UnhandledExceptionFilter
GetCurrentProcess

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ