f80f61d5910a5f31824515b1228b141c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f80f61d5910a5f31824515b1228b141c_JaffaCakes118
Size

52KB
MD5

f80f61d5910a5f31824515b1228b141c
SHA1

9335b8c05ca94e795788ab3777271a0c6841267e
SHA256

8907645c1db5a51ac7709c88906e5c3596ca04528b15e0b7bd12e12ed9acdb92
SHA512

2ea0044c6a0368fdfa89000396de9576e1c4cb0321245920e7f0bf7fc24e294652ff487fbaff13506c101f7e7cced11bc984c7f330ce353d303a6bf037f4fbf5
SSDEEP

1536:VLWjZTPxfdLJc5RKjWbSmoRfRnBGmu2FKbxO:VSlxflWbSm2782FKbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f80f61d5910a5f31824515b1228b141c_JaffaCakes118

Files

f80f61d5910a5f31824515b1228b141c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc12c5d6fb9871c5e18b221d25ba7380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBA
EndUpdateResourceW
EnterCriticalSection
ExitProcess
GetCurrentDirectoryW
LoadModule
QueryDosDeviceW
ReadConsoleOutputCharacterA
SetSystemPowerState
WaitForMultipleObjectsEx

advapi32

GetAclInformation
LookupPrivilegeDisplayNameW
PrivilegeCheck
QueryServiceLockStatusW
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyExW

gdi32

CreateEllipticRgnIndirect
CreateRectRgnIndirect
EnumFontFamiliesExA
GetCharABCWidthsFloatW
GetEnhMetaFileA
GetEnhMetaFileDescriptionA
GetEnhMetaFileHeader
GetMapMode
PolyTextOutW
SetEnhMetaFileBits
SetICMProfileW
SetMagicColors

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE