e7aa754f4fb985e9b42dd4f288e953c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7aa754f4fb985e9b42dd4f288e953c5_JaffaCakes118
Size

57KB
MD5

e7aa754f4fb985e9b42dd4f288e953c5
SHA1

96cf7a28df44f5d3cca8dedec28ac74add04e45e
SHA256

97992982fea307f963d3303a6d3df8021f0feab9600962e3ba0ce2afde294d21
SHA512

8736c63e33b1110e932bf5eb40b997a4fd9422abe19a4c501a81270c959a11cd0dc023f2763466a8aee0eb1c384a2da85550c4b97e311331cc51cbb8b85198f1
SSDEEP

1536:jGtWBxNTLeJRttKGCRrKqtcgTDAL2zH2Dn:itWBrRtdzTmJDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7aa754f4fb985e9b42dd4f288e953c5_JaffaCakes118

Files

e7aa754f4fb985e9b42dd4f288e953c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2149d0cc1da531e12e3af9300a038dcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BackupEventLogA
CryptGetKeyParam
GetAclInformation
GetServiceDisplayNameA
GetSidSubAuthority
IsTextUnicode
ObjectDeleteAuditAlarmA
RegFlushKey

kernel32

GetCPInfoExA

shlwapi

PathMakePrettyA
PathQuoteSpacesA
PathSearchAndQualifyA

user32

DrawFrame
GetClassWord
InternalGetWindowText
RedrawWindow
RegisterDeviceNotificationA
SetDoubleClickTime
SetScrollInfo
SetWindowRgn
SwitchToThisWindow

Sections

.czwn
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.arqdc
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zctq
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnyp
Size: 25KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ