145cfd5bf322749b77ab06a85b1a7486_JaffaCakes118 | Triage

Sharing

General

Target

145cfd5bf322749b77ab06a85b1a7486_JaffaCakes118
Size

249KB
MD5

145cfd5bf322749b77ab06a85b1a7486
SHA1

53fd3eca9d1686ef8471be847310689758f36024
SHA256

ea5318e803234bea449a7fa27096ebfe1aa573b143016325cf8fca0f3db3017f
SHA512

f8024f5e3fc609b2487b0f0462e4bca915c2b4f9e7872659494d3bddb823817632485226345ab88405771e15aedffad674127bdfd6281f60c6f3b0834829f729
SSDEEP

6144:G9f5XOyIcAyFD7lzDkFzfHAJJcLTae1ysAmQQNI3SSl:GZ5eyIcAy9EzfHpTYsjqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
145cfd5bf322749b77ab06a85b1a7486_JaffaCakes118

Files

145cfd5bf322749b77ab06a85b1a7486_JaffaCakes118
.exe windows:6 windows x86 arch:x86

c93fd93bd6bc0a48153291ca3b76a836

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DeviceProperties.pdb

Imports

kernel32

HeapSetInformation
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

IsWindow

msvcrt

__p__fmode
_controlfp
__p__commode
?terminate@@YAXXZ
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wtoi64
__setusermatherr
__set_app_type
_except_handler4_common

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

PACK
Size: 160KB - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE