b89142e7a729891e71cdd5bb588a0245_JaffaCakes118 | Triage

Sharing

General

Target

b89142e7a729891e71cdd5bb588a0245_JaffaCakes118
Size

186KB
MD5

b89142e7a729891e71cdd5bb588a0245
SHA1

26be2388fdff1581376c6e449c544ccfef4dc0c9
SHA256

c961a8f169c9a42bcf64c99facb2aa4bd306d8446d62f10cc3ed7ff21a188e86
SHA512

3ca26cf4c315d73fc659481776a833557f1282e785bc087046b4db58daa49429fc216b21ec42ff7d2ca40cfbc9b2c0766304011c21a7a23280262fbc1304840d
SSDEEP

3072:Mw/aF4Q0Vaqrp5TULMQ5Wf86/pMWmUsc8U6WbRND7tO17J8KlnTKs2D1KlP70D0M:gF4Q0njqvAf86BMvU6U6WbRRp2iKRjQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89142e7a729891e71cdd5bb588a0245_JaffaCakes118

Files

b89142e7a729891e71cdd5bb588a0245_JaffaCakes118
.exe windows:5 windows x86 arch:x86

986c9c60c1854d3d7b66d3619e8cad1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Installation\Setup\Directory\Setup.exe

Imports

msvcrt

__setusermatherr
__p__commode
atol
__p__fmode
__set_app_type
_controlfp
_ismbblead
exit
_initterm
mbtowc
isalnum
_amsg_exit
_cexit
_exit
putc
_XcptFilter
__getmainargs
clock

kernel32

CreateRemoteThread
CloseHandle
SetFileAttributesW
EscapeCommFunction
GetCurrentThread
lstrlenA
SetFileAttributesA
SetCommBreak
GlobalCompact
SetupComm
SetWaitableTimer
lstrcpynA

Exports

Exports

_PostThreadMessagePostThreadMessageA@0
_PostThreadMessagePostThreadMessagePostThreadMessagePostThreadMessageA@0

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.txtdat
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ