0891a737bdb832e4fee8735c13834c60_JaffaCakes118 | Triage

Sharing

General

Target

0891a737bdb832e4fee8735c13834c60_JaffaCakes118
Size

62KB
MD5

0891a737bdb832e4fee8735c13834c60
SHA1

8947206caa16683caaaf601094496d5da07af579
SHA256

fa168121228d29097be9e6c1d16edf52475a5a692e1684785546bf8a07d383a2
SHA512

9cbf2301db95587f1d98188050a7ee45c4831eae0db96a4a9d069e18c5c14e864c9fbe285fc38d6da70151d885670737d15edc06c8261f153ec8064fe5c25378
SSDEEP

1536:JVJ5HdEhGuDPGqVTygPtQ21NLaBf1hIo0a:HXdEhXdVTvnLif1B0a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0891a737bdb832e4fee8735c13834c60_JaffaCakes118

Files

0891a737bdb832e4fee8735c13834c60_JaffaCakes118
.exe windows:5 windows x86 arch:x86

584afeb5bbae3be9da0ff393a7c52609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGenKey
IsValidSid

kernel32

CancelWaitableTimer
ResumeThread
TlsGetValue
SizeofResource
WritePrivateProfileStructW
WaitForMultipleObjects
_lwrite
RequestDeviceWakeup
GetLastError
GlobalLock

gdi32

SetAbortProc
SetTextAlign
PolyPolygon

actxprxy

GetProxyDllInfo

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vvhffrj
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 591B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ