3254c44f12f050425f06cded7f162149_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3254c44f12f050425f06cded7f162149_JaffaCakes118
Size

11KB
MD5

3254c44f12f050425f06cded7f162149
SHA1

1079000b0443493ddede9ad908e1e6e5c3086c33
SHA256

c8a22616d9b2298e2dd29a7bb30595f1fb2d8f744d3d871a45e785d608d6bd39
SHA512

57f2c8bb466650ecb09a919b4dd124f909352e97fdc5a8a9a42d649a068ca98dbea11eb4b32407577eaf7871d082c9d94273b0bb72d3f7120c9a478c5385d930
SSDEEP

192:6av1fdDcGs4v9E/exYAGW7NeTL3TNeT4+vA:XDLs4v9E/tTMNeLNek+vA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3254c44f12f050425f06cded7f162149_JaffaCakes118

Files

3254c44f12f050425f06cded7f162149_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8151e7c08ca4c279d0edb332643217a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
GetDiskFreeSpaceExA
SetLastError
LocalFree
CloseHandle
FreeConsole
LoadLibraryExW
FindClose
VirtualProtect
DeleteCriticalSection
GetDriveTypeW
IsBadReadPtr
GetLastError
CancelIo
ResetEvent
GetDateFormatA
GetCommandLineA
IsBadStringPtrA
GetModuleHandleA
TlsGetValue

advapi32

OpenEventLogA
CloseTrace
FreeSid
RegCloseKey
CloseEventLog
LsaClose
AccessCheck
LsaFreeMemory
LsaSetSecret
RegLoadKeyA
IsTokenUntrusted
GetFileSecurityA
RegCreateKeyExA
RegCloseKey

glmf32

glsBinary
glsBlock
glsGetError
glsCharubz
glsChannel

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ