14e64eb9bddf1a74e3a588f53034292f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e64eb9bddf1a74e3a588f53034292f_JaffaCakes118
Size

25KB
MD5

14e64eb9bddf1a74e3a588f53034292f
SHA1

5c9b488afd5e49770387c935b4337fb9848eda8c
SHA256

3e10cee2e224c62a2ba3eab234941933ddc91cca96983c6863a8f6dda0b7960b
SHA512

a0e45effb4d702182ffda6da6d82e26ddccc5e3d89d5c9992534c463f81b693273e88f0f0fff312ba44afbc6a9456544585ecaeeb5c7b9b04c1333f331c2c81b
SSDEEP

384:6fM0kEa9sxmH/xC4+vcrQmKfw9C7KgVw5Z8qU9B5jrayDc7ojaI60OaW/ibG:6M7f9W4+vFAgVw5Ju5PRjJ60KKbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e64eb9bddf1a74e3a588f53034292f_JaffaCakes118

Files

14e64eb9bddf1a74e3a588f53034292f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE