f0ba0294512bd9fc5238ab8526b15981_JaffaCakes118 | Triage

Sharing

General

Target

f0ba0294512bd9fc5238ab8526b15981_JaffaCakes118
Size

162KB
MD5

f0ba0294512bd9fc5238ab8526b15981
SHA1

1e1ab95baca90376e874215c32b12690a897ac67
SHA256

9592321c69d2a5ca94e13795242f4362b1123d0081b906c0f3ddcc80985d3c4f
SHA512

fd62a0ce7175c77c4fbd4d53facc72ec01084d0c056ccdaa700b91c41cc0874d3c23524d30b550a70cf658a9e98a75c49c79c375efbd6298eda6755ec5052059
SSDEEP

3072:8/zfGU6FegH8rFAQ/3TkeyaRF/R7suYCoXZ0ryUrYhaqiVfkJ:8/DGUgegH8rf5LnYCg+X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0ba0294512bd9fc5238ab8526b15981_JaffaCakes118

Files

f0ba0294512bd9fc5238ab8526b15981_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2cf389b7acd5b2a5e16e5840ed8aa4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

clusapi

CloseCluster

kernel32

QueryPerformanceCounter
ReplaceFileW
GetCurrentProcessId
InterlockedExchange
GetProcessId
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentThreadId
Sleep
GetStartupInfoW
EnumResourceTypesA
SetUnhandledExceptionFilter
ExitProcess
GetTickCount
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcess

user32

EnumDisplaySettingsW

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ