0692774b9ac4abf855fd0f2ad828bd96_JaffaCakes118 | Triage

Sharing

General

Target

0692774b9ac4abf855fd0f2ad828bd96_JaffaCakes118
Size

422KB
MD5

0692774b9ac4abf855fd0f2ad828bd96
SHA1

6177a2973bd979875b5849de3c9855af36518504
SHA256

b6d7b4f946942a910f240017add9f48d7b465ae33ed89481ec4284abc6033aca
SHA512

2610139ccec0207ac4c834d6352969dd944432b5bde9fc4b000a68e32ced87a942d70b7fb555378c8925846d6ead4a5d3241c9e9d83491743406f5dbb4e2100f
SSDEEP

12288:H3BEaZsRDHux7TSFqq2x4jLpzkvFMPVrk7e0yk:hZsRDi7Tiv2x4jyMdrk7e0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0692774b9ac4abf855fd0f2ad828bd96_JaffaCakes118

Files

0692774b9ac4abf855fd0f2ad828bd96_JaffaCakes118
.exe windows:5 windows x86 arch:x86

932c51fe25abb34aab62cedd138bdd07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrCStdStubBuffer_Release
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
IUnknown_AddRef_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Invoke
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_Release_Proxy
NdrOleFree
NdrOleAllocate
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Connect

ntdll

NtAllocateVirtualMemory
_itoa
NtAdjustPrivilegesToken

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE