34606495f4724377e7cf77086a7a8a8b_JaffaCakes118 | Triage

Sharing

General

Target

34606495f4724377e7cf77086a7a8a8b_JaffaCakes118
Size

50KB
MD5

34606495f4724377e7cf77086a7a8a8b
SHA1

7d0e6e7d006f4ebef876a0f193ba3b9496a5af5a
SHA256

bbfd3cbcab0cadf18211d8fcd0c629ccb9fd3cad5b331edc9b5a3085c6f6365d
SHA512

af491619ab0de79083de7ad046212734d7d0d3ee13b7f07122b6299c4b0743db48984d496424f918319a3413467ca43e3d593d5d08b4c194de5574de19f61702
SSDEEP

1536:6P/oABS9fXdkTq6fdRblGTOgcueuE6kycfpPFbmC:U6kOYbsTyn9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34606495f4724377e7cf77086a7a8a8b_JaffaCakes118

Files

34606495f4724377e7cf77086a7a8a8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33eee43ce26068c4fccc890357b9d481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
CreateDirectoryExW
CreateToolhelp32Snapshot
ExitProcess
GetLastError
GetProcessWorkingSetSize
GetVersionExW
GlobalFindAtomW
OpenFileMappingW
ReadConsoleOutputW
ReadFileEx
SetFileAttributesA
lstrcmpiW

advapi32

AddAccessDeniedAce
CloseServiceHandle
ControlService
CreateProcessAsUserA
CreateServiceA
CryptDestroyKey
GetEffectiveRightsFromAclA
RegSaveKeyW

user32

CharUpperA
DdeQueryConvInfo
EndTask
GetMessagePos
GrayStringA
IsMenu
MsgWaitForMultipleObjectsEx
RegisterWindowMessageA
SendMessageW
TranslateAccelerator

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE