c60d1ebe30b0cec37a80c0727d66eaca_JaffaCakes118 | Triage

Sharing

General

Target

c60d1ebe30b0cec37a80c0727d66eaca_JaffaCakes118
Size

213KB
MD5

c60d1ebe30b0cec37a80c0727d66eaca
SHA1

aaa09764dccf7dae7f5e1ab5f19685463b6c533f
SHA256

e9e505847ba63f69437c8a44a1ea2e427c49ec8f7b473aa2cd5345e4146fadf4
SHA512

e6413d5da88c83155b0fb8560a415efb1e739a3f6a8b03a28a1abe15bc33e704058f7b3f78ea58f0c7591f2aef4f9fbe7f90479891ad91668ad093a74412a111
SSDEEP

3072:AHNK5/7rSKZe11eiV5Aok9SUVd/n4d8jiITCRD8bPsv6adrQoJyc/7SD9G0xNVZz:AtMDGKI1YXoqSSdOlvX0oJyc/730xNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c60d1ebe30b0cec37a80c0727d66eaca_JaffaCakes118

Files

c60d1ebe30b0cec37a80c0727d66eaca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34365e37296c88dd12cc90f7f39f4a43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

RealGetWindowClass
LoadIconW
MapVirtualKeyW
GetSystemMetrics

kernel32

CreateFiberEx
GetCurrentThreadId
TlsGetValue
Sleep
TerminateThread
GetLocaleInfoW
EnumResourceNamesW
GetLastError
FoldStringW
FlushFileBuffers
TlsAlloc
LoadLibraryA
TlsFree
VirtualProtect

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

msimg32

AlphaBlend

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ