d11768a81df9ea9fa968e8ac470a9096_JaffaCakes118 | Triage

Sharing

General

Target

d11768a81df9ea9fa968e8ac470a9096_JaffaCakes118
Size

437KB
MD5

d11768a81df9ea9fa968e8ac470a9096
SHA1

e0712106a4c4d7beb65d3dd6a5b9294a42926235
SHA256

7bf404217ca864ab3dacc2b17a3dda23c65a580a062fa3a6c13b6a6f03aecccc
SHA512

32d65265be8dc4f346c744c7c1807d6ddec120be76f7762c8122cc1440d1ed24ec42c459e7f25450986081ac7f611ea3fdb759f93fd0c45a0789fce3fc8b0541
SSDEEP

12288:I8KncQlqxW7MvP4mQTnjRadi4nTctTMaWOUFPYOC:Izceqk+QVnjREfnTc5MR9YO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d11768a81df9ea9fa968e8ac470a9096_JaffaCakes118

Files

d11768a81df9ea9fa968e8ac470a9096_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8db5d49cc1798d20cfd4697c24c19969

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCommandLineA
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
QueryPerformanceFrequency
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

user32

GetWindowTextLengthA

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ