c7eb476085e37bc96884e9262af1ff93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7eb476085e37bc96884e9262af1ff93_JaffaCakes118
Size

137KB
MD5

c7eb476085e37bc96884e9262af1ff93
SHA1

3720a660a987b61cd22fb489e4db9be604cfd7e3
SHA256

590abd0dc7041619feb4b8d62e6a79464281347fd6caeed5391ac57ce32789f6
SHA512

ef4da7af5161d0c41f04226517d7ae0933366a84d03c5c6aaf07308e875631a07ba95b747a7059e37e9845a14921e049e1e54d15593ffe38047325cbc2fe2e14
SSDEEP

3072:gZtQh/P4jEnI/PFMMavWMOaxU6u8p5kCkPYc5D5txo1ZKw:WtQdPhnI/PFevgj6dnkPhZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7eb476085e37bc96884e9262af1ff93_JaffaCakes118

Files

c7eb476085e37bc96884e9262af1ff93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

741da98406a5b25a9cff51fc3da42b32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

CloseCluster

comctl32

InitCommonControlsEx

kernel32

QueryPerformanceCounter
TerminateThread
Sleep
GetStartupInfoW
IsDebuggerPresent
CreateIoCompletionPort
UnhandledExceptionFilter
TerminateProcess
EnumResourceNamesW
SetUnhandledExceptionFilter
GetCurrentProcessId
ExitProcess
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InterlockedExchange
InterlockedCompareExchange
GetCurrentProcess

user32

EnumDisplaySettingsW

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ