2a9ebd300d1def481c788748e1c0aca6_JaffaCakes118 | Triage

Sharing

General

Target

2a9ebd300d1def481c788748e1c0aca6_JaffaCakes118
Size

8KB
MD5

2a9ebd300d1def481c788748e1c0aca6
SHA1

15a7adb2c38f6ef1684bf66d60c3d6dbfb2226ad
SHA256

4a3d60a28ce2155dadf3f4572428ce8d514393f411edc8d336ba56b7102877b9
SHA512

97058a627a57afadb92d6fe07a486f598b9cabbeefed252cf366e7288a482a81db9418442e63d2907f3ef98aa4e8bc0317732c3daa853ea5de4febcae8e9c1a4
SSDEEP

192:J8goD6nfPXJO2i1Lk/6jUMNBNozkJIFRI0z6UX:MDOfPSLXjPUzRuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a9ebd300d1def481c788748e1c0aca6_JaffaCakes118

Files

2a9ebd300d1def481c788748e1c0aca6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c330cec1152e152274dec1099406f94e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindCloseChangeNotification
GenerateConsoleCtrlEvent
LocalAlloc
OpenWaitableTimerW
SetThreadContext
WriteTapemark

advapi32

CloseServiceHandle
ConvertSecurityDescriptorToAccessNamedA
CryptDestroyKey
CryptSetProviderA
GetExplicitEntriesFromAclA
GetSecurityDescriptorLength
SetAclInformation

user32

CopyAcceleratorTableW
EditWndProc
EnumDisplayMonitors
EnumPropsExW
GetCaretPos
GetCursorInfo
GetWindowModuleFileNameA
GetWindowModuleFileNameW
IMPQueryIMEW
ImpersonateDdeClientWindow
MessageBeep
ModifyMenuA
SetScrollPos
UnionRect
keybd_event

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE