JaffaCakes118_92c384942f313fc9592f5b2df23fba0c | Triage

Sharing

General

Target

JaffaCakes118_92c384942f313fc9592f5b2df23fba0c
Size

186KB
MD5

92c384942f313fc9592f5b2df23fba0c
SHA1

71a12737efabc4a0d8f362b8b80f662688c8e486
SHA256

76a0dae152f5eec6987d087c1172443ceb192accb82cde7555e8129f607c7e1c
SHA512

a70aebf9d1d65b71d9703699a24136a7d6ad9bf4dbe312027bf71b352928d964c83a9fe4ede220f917c34ea251b70e99276a271403772f55deb0d24347ed2a90
SSDEEP

3072:kvuQN2WHNAdOAWhq0C6DT3mN3vhVhrezLua28PrMZVtswSz+41sCm:k5NJ+dM0cn6hevu84ZLs/1sCm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_92c384942f313fc9592f5b2df23fba0c

Files

JaffaCakes118_92c384942f313fc9592f5b2df23fba0c
.exe windows:4 windows x86 arch:x86

b4bca6055e0a58ceda5ca424412df4f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

shell32

ShellExecuteW

kernel32

InterlockedCompareExchange
ReplaceFileW
InterlockedExchange
Sleep
IsDebuggerPresent
GetProcessId
GetCurrentThreadId
UnhandledExceptionFilter
GetCurrentProcessId
EnumResourceTypesA
SetUnhandledExceptionFilter
QueryPerformanceCounter
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoW
GetCurrentProcess

clusapi

CloseCluster

user32

EnumDisplaySettingsW

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ