f3e5dc011f539b180f4ba9ed5f425f5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3e5dc011f539b180f4ba9ed5f425f5f_JaffaCakes118
Size

25KB
MD5

f3e5dc011f539b180f4ba9ed5f425f5f
SHA1

bef405be181e4d4dbc2f0b2c923b2f23bd03b1b5
SHA256

156e4e9dcbe6cc9f54305ce25d8d483e0652c1dd51b5e17054498fbf573ea65e
SHA512

d672a9ffc70686416f03b326f7c1e55c1d2615b47d6655239e586bff942cb88854e046377a008cf9fc1b58d6267f8ed857a2e2fe00557a026ae13e7e14cb1e3a
SSDEEP

384:0ScgpeQYaqTb5WN8/bGFQ6GYTHAmVcCsIQysJlLxwj7+G8nXeZ:0bgpe7Y6TGzGYNVc1IQ7J4jiG2eZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e5dc011f539b180f4ba9ed5f425f5f_JaffaCakes118

Files

f3e5dc011f539b180f4ba9ed5f425f5f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE