JaffaCakes118_5616f45b2f1a4b2de392419aa5fef243 | Triage

Sharing

General

Target

JaffaCakes118_5616f45b2f1a4b2de392419aa5fef243
Size

200KB
MD5

5616f45b2f1a4b2de392419aa5fef243
SHA1

29ced6fe4dd0b97869922979abe7bd340453bc57
SHA256

df0776fed52ecb76ed1b956e598fa62b517c93b25fcdc8850a79107ae48c1a5a
SHA512

fdc453b36099bebe785a0d00ccc4c8285fd263b605d76acd6975a92a8bb764b2ca9c60c0378e429d5167f1ebbaa647896d7e6b4bd7d3bc3ee82ed4fc8d506c22
SSDEEP

6144:OYfgG9CRyj2+zjf8dprqwLR+5yntL/fcwH04V0A3BqVgM:OYl9CRq2Wj0drLs5q/rG+qV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5616f45b2f1a4b2de392419aa5fef243

Files

JaffaCakes118_5616f45b2f1a4b2de392419aa5fef243
.exe windows:4 windows x86 arch:x86

26c8bf700ae4c1e4efe0ef32858cc9ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msimg32

AlphaBlend

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

CreateFiberEx
TlsGetValue
GetLocaleInfoW
TerminateJobObject
TlsFree
GetLastError
GetCurrentThreadId
EnumResourceNamesW
TlsAlloc
FlushFileBuffers
FoldStringW
Sleep
LoadLibraryA
VirtualProtect

user32

LoadIconW
RealGetWindowClass
MapVirtualKeyW
GetSystemMetrics

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ