f78ffbb95400f574f2a11aed9b4150a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f78ffbb95400f574f2a11aed9b4150a6_JaffaCakes118
Size

107KB
MD5

f78ffbb95400f574f2a11aed9b4150a6
SHA1

ad68182bec2f4ff970974b03f37b404948bfad71
SHA256

7f508a5549445c90890fde3a48da1759614cadd4360558654a07e7261b0135cb
SHA512

bd077fc2bc7ca5bf45a06e5e412700cfd9a18373c1aa33bd5182b195d424bf5c146f33ca845360982f94e1ae326df1443d7d121ffe06ab4d59201f1647b6f034
SSDEEP

1536:qIrf0plIAVBkPXk58PGhn7bSnokEouxGiHeAyrqzgQr7bZFkLRwpJ5pKzCIw:qKf0XC851/SnokEosrnDZFoipKmz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f78ffbb95400f574f2a11aed9b4150a6_JaffaCakes118

Files

f78ffbb95400f574f2a11aed9b4150a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d83426818b98b2698a3c837dc4c0ac97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildSecurityDescriptorA
CloseServiceHandle
CreatePrivateObjectSecurity
CreatePrivateObjectSecurityEx
AdjustTokenPrivileges

user32

ChangeMenuA
ChildWindowFromPointEx
CloseClipboard
CopyImage
CreateDesktopA

Sections

.text
Size: 69KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE