JaffaCakes118_b81aa84c3ab75ad27f9adc6404aa1bb5 | Triage

Sharing

General

Target

JaffaCakes118_b81aa84c3ab75ad27f9adc6404aa1bb5
Size

180KB
MD5

b81aa84c3ab75ad27f9adc6404aa1bb5
SHA1

f9f16c4d58672039d86278da7ba8ee0652724f6e
SHA256

4d0cdff4cca712807cab533cdcc62d1021eac388985d4a9789364dac8ce319ed
SHA512

4484d701470261a9eceee8ca44f7bdf21c688ec9f097739c77da434f18d8ae5f91afabbe5f316f2af694787fbeeb3f57070f079d7ed088145616560817af96d0
SSDEEP

3072:+KL5XRH8QrkUXS6TlSNaoHvHvyUznEva7KnhbFSn/adJeHWBT1ky:+KNBH8QNXtScKvznEva2nhMABl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b81aa84c3ab75ad27f9adc6404aa1bb5

Files

JaffaCakes118_b81aa84c3ab75ad27f9adc6404aa1bb5
.exe windows:4 windows x86 arch:x86

b1be1392faccdf7edbe1cc5f400221b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

ReplaceFileW
SetUnhandledExceptionFilter
InterlockedCompareExchange
TerminateProcess
GetCurrentProcessId
GetProcessId
GetStartupInfoW
IsDebuggerPresent
EnumResourceTypesA
GetTickCount
UnhandledExceptionFilter
ExitProcess
InterlockedExchange
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcess

clusapi

CloseCluster

user32

EnumDisplaySettingsW

shell32

ShellExecuteW

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ