JaffaCakes118_bbe9e5552c315b4d10bfe93e6f6a281f | Triage

Sharing

General

Target

JaffaCakes118_bbe9e5552c315b4d10bfe93e6f6a281f
Size

253KB
MD5

bbe9e5552c315b4d10bfe93e6f6a281f
SHA1

667ff0935b5e3e0393c21fb329b71a3250b0b155
SHA256

0f4d617c4de914a1dd38f3a01e898f89176ed09ba16455f4c5a745f7219b66b6
SHA512

54b88b53373c6e48c364e1e3bf1f4916adfbfe396c06717b809e2bc0b3529a8fd221a1dc7d3d4dfdfbdd23cab3e002ddc08a2e52e9e020460157bb7823da2072
SSDEEP

6144:RoUm1by5SMlvaFPjDlNuXuXzBmnZJLrfO4nCAIdc:ey5SMlv4S+DsrfO4nJIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_bbe9e5552c315b4d10bfe93e6f6a281f

Files

JaffaCakes118_bbe9e5552c315b4d10bfe93e6f6a281f
.exe windows:4 windows x86 arch:x86

f4024b0d1174f8e709ff81d8b10abf8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
MultiByteToWideChar
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
lstrcmpA
GetProcAddress
LoadLibraryA

mssip32

CryptSIPVerifyIndirectData
CryptSIPGetSignedDataMsg
CryptSIPGetRegWorkingFlags

htui

HTUI_DeviceColorAdjustmentA
HTUI_ColorAdjustmentW
HTUI_ColorAdjustment
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CODE
Size: 83KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 137KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ