f7269db071401b7ae77a9ad435e7d7c1_JaffaCakes118 | Triage

Sharing

General

Target

f7269db071401b7ae77a9ad435e7d7c1_JaffaCakes118
Size

185KB
MD5

f7269db071401b7ae77a9ad435e7d7c1
SHA1

5a40a6c631044d1baff47d5033bd75dfb2d25567
SHA256

0e45e1853c0bc76bc96fcd66244e3b3a08647002878ede3b0de16178f1de03e7
SHA512

2fa905023eb7b98914ca7f1c0614af9433ad2405b11db01a843fbaad8927e9cefe9305ed73a45421bfc4dbf141cf9cf6a8e945fbee89d175062d5ba353111221
SSDEEP

3072:KO9NrNPYqjpXjOJ+rxgi0UNa4X0BvTZSc9NKRWjR7TEaafoGvD+YIgz2w1W/dda:NLPYqNXSJSWi0UNa4EBboc9NIYEoGvDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7269db071401b7ae77a9ad435e7d7c1_JaffaCakes118

Files

f7269db071401b7ae77a9ad435e7d7c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d72d6c8a054e063a843542f98fe02107

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFiberEx
TlsGetValue
TlsFree
FoldStringW
TerminateJobObject
Sleep
EnumResourceNamesW
GetLastError
FlushFileBuffers
GetCurrentThreadId
LoadLibraryA
TlsAlloc
GetLocaleInfoW
VirtualProtect

msimg32

AlphaBlend

user32

RealGetWindowClass
LoadIconW
MapVirtualKeyW
GetSystemMetrics

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ