da57048d65216584acf61da322e502ab_JaffaCakes118 | Triage

Sharing

General

Target

da57048d65216584acf61da322e502ab_JaffaCakes118
Size

186KB
MD5

da57048d65216584acf61da322e502ab
SHA1

3766d2520573dc2448f7a6eaa471f0a163d12d6c
SHA256

40d9e0fab0717b03700dc40192719bd3980a26316f54051ee3803cb9f310d150
SHA512

4afcf1f70a54c2da2a771db0a970bf92230daf624289b40399b126a37c18f06649d3c3b4415fd3b4f963e34ea7eb987f5fd1ca01ed43e532401aa242d584fc6d
SSDEEP

3072:bcRvZp5tU0pvdjP9Ej5nVeSQWW6RojbQnemiJurgoqK3cMvNQ3PDJ/hWefzu8yx:IRvZtpvd79PL6Rib4eDJDKDvNQ/JhnzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da57048d65216584acf61da322e502ab_JaffaCakes118

Files

da57048d65216584acf61da322e502ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

901cb2535fc6fd9ed908b09c8e5d50b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msimg32

AlphaBlend

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
GetCurrentThreadId
GetLocaleInfoW
TerminateJobObject
GetLastError
TlsAlloc
Sleep
EnumResourceNamesW
FlushFileBuffers
FoldStringW
TlsFree
LoadLibraryA
TlsGetValue
VirtualProtect

user32

LoadIconW
RealGetWindowClass
MapVirtualKeyW
GetSystemMetrics

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ