65f07a779558692d6464900c5f66270e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65f07a779558692d6464900c5f66270e_JaffaCakes118
Size

137KB
MD5

65f07a779558692d6464900c5f66270e
SHA1

067b412255e60fd41b1a4dd0852007f7dcb5b158
SHA256

417e6b948fcabc720c9afe8393f63f019a64666ecf82ee271fb415af6989380c
SHA512

1ccbf3341ad034ec9f6c7cdf5c72b337c5c624bda65391dce1b7cdd410949276e0a43db3236dab218553a3446c2ba9c47dea50fae82db5ece683be39831e7262
SSDEEP

3072:gZtQh/P4jEnI/PFMMavWMOaxU6u8p5kCkPYc5D5txo1ZKw:WtQdPhnI/PFevgj6dnkPhZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65f07a779558692d6464900c5f66270e_JaffaCakes118

Files

65f07a779558692d6464900c5f66270e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

741da98406a5b25a9cff51fc3da42b32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

CloseCluster

comctl32

InitCommonControlsEx

kernel32

QueryPerformanceCounter
TerminateThread
Sleep
GetStartupInfoW
IsDebuggerPresent
CreateIoCompletionPort
UnhandledExceptionFilter
TerminateProcess
EnumResourceNamesW
SetUnhandledExceptionFilter
GetCurrentProcessId
ExitProcess
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InterlockedExchange
InterlockedCompareExchange
GetCurrentProcess

user32

EnumDisplaySettingsW

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ