295374593e197a035140ea2555775d7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295374593e197a035140ea2555775d7d_JaffaCakes118
Size

327KB
MD5

295374593e197a035140ea2555775d7d
SHA1

5df356a16067275750f5ec275e3784b718dab5b0
SHA256

8a4b8f83969106544a93a4c47042b1c7ef529c9c8e14218069fa2a346eef6b53
SHA512

72d8e09def16c0f12c389489272aee7bfc107bb472069f01549b089aa301e788b31b4a3f13f98252b7d7e257ad699a8c5099963692c9c15b18523afcbff3f885
SSDEEP

6144:RQpiFIsxwuJbxWpMq9wtFhlUmU+iM2TmiqyKt/sgbWn5hz:aiF/JbfFwmU+/DS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295374593e197a035140ea2555775d7d_JaffaCakes118

Files

295374593e197a035140ea2555775d7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21b0d74764a0e7477debfdf8222af3da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
FindClose
GetDiskFreeSpaceExA
ResetEvent
CloseHandle
TlsGetValue
GetDriveTypeW
GetLastError
EnumResourceTypesW
SetLastError
VirtualProtect
LoadLibraryExW
DeleteCriticalSection
GetDateFormatA
IsBadReadPtr
LocalFree
FreeConsole
IsBadStringPtrA
CancelIo
GetModuleHandleA

advapi32

GetFileSecurityA
LsaSetSecret
IsTokenUntrusted
RegLoadKeyA
CloseTrace
CloseEventLog
RegCloseKey
OpenEventLogA
LsaFreeMemory
LsaClose
AccessCheck
FreeSid
RegCreateKeyExA
RegCloseKey

glmf32

glsBlock
glsGetError
glsBinary
glsChannel
glsCharubz

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ