2bde665fb56c5e0a8d3cb6fdb5d3a508_JaffaCakes118 | Triage

Sharing

General

Target

2bde665fb56c5e0a8d3cb6fdb5d3a508_JaffaCakes118
Size

25KB
MD5

2bde665fb56c5e0a8d3cb6fdb5d3a508
SHA1

6cf605fdbc2cde2cab691435d91c33d5ba84b974
SHA256

cebd17ea91e3339c8d382b1e844ecdb0934b4a00608ef174514808bc57f94d54
SHA512

cb4c0e8d8d2a89ebfee34fc28c3d05b3728da05faf5286727b5aff7f3bad0ac35493fef0e8fc6fb1533237a36a8967a108f392dc9eb7ceb193a6655b525e514d
SSDEEP

384:wX8Wh3KcahRKVPROONIEZvN7ro0pTOtvlodJ6KrR0GA8kp3sbCnzH5ibG:Gh3KrqDTNIENvpTGtoXfqSk5s2YbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bde665fb56c5e0a8d3cb6fdb5d3a508_JaffaCakes118

Files

2bde665fb56c5e0a8d3cb6fdb5d3a508_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE