fb20e06381555cfd641a05dbd0827398_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb20e06381555cfd641a05dbd0827398_JaffaCakes118
Size

488KB
MD5

fb20e06381555cfd641a05dbd0827398
SHA1

6cff79abddd21ae5a19583d3dd55f1a0f74ffa5f
SHA256

902132db18968498f7cd0003c6158abfa552a9c132575db0e64c756d38a9f946
SHA512

04375d8fb2dd67ce7926ad3b1202f956e487ec6066a6319c1f70dc871848db87e5b1efa6e35bec4796d9959d940a791e5a1f121a9db8f30f07e575fe2c37ac8f
SSDEEP

12288:W8ifFjdojF/xdkSZd86XS42jINI7IA6597a5C/CVz83Cws8:LkZuF/xd7mUIxYba5TVz83M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb20e06381555cfd641a05dbd0827398_JaffaCakes118

Files

fb20e06381555cfd641a05dbd0827398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b71401692720fde0d9796acf39246c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaLookupPrivilegeDisplayName
LockServiceDatabase

ntdll

RtlRegisterWait

user32

GetCaretBlinkTime

kernel32

GetLastError
GetSystemDefaultUILanguage

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE