135e944f5bafb37e9a50c2564756c543_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135e944f5bafb37e9a50c2564756c543_JaffaCakes118
Size

131KB
MD5

135e944f5bafb37e9a50c2564756c543
SHA1

18d0e4bd7c0435ed0fa8bfc828edc4ddc3f7c322
SHA256

63cefa3283c88fe2566e7e882578c1c713aeac317d94fd44bb9f4e7f117c9aeb
SHA512

5cd7ee3165e84690329ba268c3af4c090cd17b04a54da2a5584193feb76dd54d43f9adc2e42a5b25ad6a0e4f5d0a27e84ab5c5e3e385c648b9b0a395df91f1e3
SSDEEP

3072:Zhek7wFoBnZDKmHAUtAME8ev+gF4Y7EDbpKwUyjGU0jx:ZXmOZPH//SV/2dKwVBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
135e944f5bafb37e9a50c2564756c543_JaffaCakes118

Files

135e944f5bafb37e9a50c2564756c543_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb9ae7f69ec9b4ba5e8c46ac3f8f212a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

TerminateThread
QueryPerformanceCounter
GetStartupInfoW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateIoCompletionPort
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
InterlockedExchange
EnumResourceNamesW
TerminateProcess
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
GetCurrentProcess

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

clusapi

CloseCluster

shell32

ShellExecuteW

user32

EnumDisplaySettingsW

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ