f74c78914a67f5ace8ac04e54b5fb129_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f74c78914a67f5ace8ac04e54b5fb129_JaffaCakes118
Size

97KB
MD5

f74c78914a67f5ace8ac04e54b5fb129
SHA1

5565235ac386d318756b027f0bb108c2c7fd1656
SHA256

0b75b6159e960f9e6fef3d4423f69f9438a0afe30113ea765c14643342e66529
SHA512

01047a61515c30349fad46690162e2f8ea831277dbc6ea7de039fa058399a953b431e0c155037884cfb4196d12f182afa8eb972157ef12987ef2eec3b12799fb
SSDEEP

1536:DEApwe6elwrKvwFNTXRYcegyrBplztu6i+2CahuaxhVQKxNxcwH6el:DEElwKsygc7lzt4uv6heixca5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f74c78914a67f5ace8ac04e54b5fb129_JaffaCakes118

Files

f74c78914a67f5ace8ac04e54b5fb129_JaffaCakes118
.exe windows:4 windows x86 arch:x86

466fb9182ebb9920f1ddd53bf2ea428b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
PeekConsoleInputA

ntdll

RtlPrefixString
RtlZeroHeap
RtlSizeHeap

user32

RealGetWindowClassW
SendNotifyMessageA

activeds

ADsBuildEnumerator

oleaut32

SafeArrayGetRecordInfo

shell32

SHFlushSFCache
SHAddFromPropSheetExtArray

scesrv

ScesrvInitializeServer

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE