104cf74e82493df167641cbf1db5bf37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104cf74e82493df167641cbf1db5bf37_JaffaCakes118
Size

328KB
MD5

104cf74e82493df167641cbf1db5bf37
SHA1

7891e74db2e9cb4365a6b1e7aab995ed143215bf
SHA256

aee75641f994f7fa851c23558e6607343b394d287a97ea7780540faf15bb758d
SHA512

ed00bac82bde88de1b8f015f1d8b4bd0a5eaf2f5fd57102ea10737c58e8942033360009c072a2835e70230ae63e00b49b2b6c520e6d7d483426f2a9c638e4465
SSDEEP

6144:zIuvNgJNDHKxe8G4GkJio3W0tiHWMeWY217sBj5mD4tm09:zTvNSDHKx4cMoGoiz17sBjmAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104cf74e82493df167641cbf1db5bf37_JaffaCakes118

Files

104cf74e82493df167641cbf1db5bf37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac46fd45e5f1c02c5fb1c124e80be9ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
Sleep
ExitProcess
GetLastError
GetModuleHandleA
VirtualFreeEx
GetSystemDirectoryA
GetProcAddress

advapi32

CopySid
AddAce

ole32

CoUninitialize

avifil32

AVIStreamCreate

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ