24c84ae368efbc0b5583d0fc54514bd2_JaffaCakes118 | Triage

Sharing

General

Target

24c84ae368efbc0b5583d0fc54514bd2_JaffaCakes118
Size

327KB
MD5

24c84ae368efbc0b5583d0fc54514bd2
SHA1

58d5e57d0249d399eeb77731009c075f0a3a8411
SHA256

0895b48d37c15eb1995eb025bf8d5d5127fbc5dd227a7f7698d6c49c8a8c881c
SHA512

08de057d31396452e556df6de4eb07c307d0e48a556ea6414523b48e3fa7d0333dfde5de6142d6cc2ec41a6f02a7b3af7383dfd4636318379316478d7d32afbf
SSDEEP

6144:uaNQ9sxwuJdznuZ30X23eLnIXQ/YCKIDbNEOD0M96dVoz:uanbs30XnIevDbNME

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c84ae368efbc0b5583d0fc54514bd2_JaffaCakes118

Files

24c84ae368efbc0b5583d0fc54514bd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1502f9f3d12af4cb8646e6d00ee1c3d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
EnumResourceTypesW
SetLastError
LoadLibraryExW
TlsGetValue
GetDateFormatA
GetDiskFreeSpaceExA
GetModuleHandleA
GetCommandLineA
GetLastError
FreeConsole
IsBadStringPtrA
ResetEvent
VirtualProtect
IsBadReadPtr
DeleteCriticalSection
CancelIo
CloseHandle
LocalFree
FindClose

advapi32

OpenEventLogA
LsaFreeMemory
FreeSid
IsTokenUntrusted
RegCloseKey
LsaSetSecret
RegCreateKeyExA
AccessCheck
CloseTrace
CloseEventLog
GetFileSecurityA
LsaClose
RegLoadKeyA
RegCloseKey

glmf32

glsBlock
glsCharubz
glsGetError
glsChannel
glsBinary

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ