fea3efb5b6099354021277333a698838_JaffaCakes118 | Triage

Sharing

General

Target

fea3efb5b6099354021277333a698838_JaffaCakes118
Size

198KB
MD5

fea3efb5b6099354021277333a698838
SHA1

037cc59dd6eb5dc1ffc6feddeb065750b5342b7d
SHA256

cef11f66033cfcc37e24b2de23562cc90d21962acd9721885bee8654e7311c7a
SHA512

8d5d9b2fdca8b584bd1a4e0f303331075d286999eb872c4c9a9ab3c29f72ac5edd3573bea650f4c0a990e95324223b7cf0d7ac8200277f2341da70442f4d5484
SSDEEP

6144:uo7EUsijmBVRJG1ye8qOrn64BVdG42ug:uoLjQfDe8qOr6+f1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea3efb5b6099354021277333a698838_JaffaCakes118

Files

fea3efb5b6099354021277333a698838_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6096e77493410c758f8000a4505e6b57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFiberEx
TlsFree
Sleep
TerminateJobObject
LoadLibraryA
TlsGetValue
EnumResourceNamesW
GetCurrentThreadId
FoldStringW
FlushFileBuffers
TlsAlloc
GetLocaleInfoW
GetLastError
VirtualProtect

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

LoadIconW
RealGetWindowClass
MapVirtualKeyW
GetSystemMetrics

msimg32

AlphaBlend

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ