4066031b0f0e9b74aadf901a1162c726_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4066031b0f0e9b74aadf901a1162c726_JaffaCakes118
Size

75KB
MD5

4066031b0f0e9b74aadf901a1162c726
SHA1

78f1240e0f30dd708cedcc76f20c044eb7fcaf86
SHA256

b85290ff51cfeeb54852a985aee6cc2cb9e59e08c9dac987057b2a855226a6c7
SHA512

939d4a69a1cc9d589038de887a57f29f17f41b0a80d7ebde9a6f39e9fef531bda2bcb73108cb8ea8c8fbee688337a30e687c324063ccac3fa70ba82ac9002de7
SSDEEP

1536:ksCw1P/8AKUVV1Q1XATEvSwPcJoEEghMMt0VosYOU:kstp/8AK4MpAQvSwEqEFhMYEXYO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4066031b0f0e9b74aadf901a1162c726_JaffaCakes118

Files

4066031b0f0e9b74aadf901a1162c726_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e61614f873b698b7ac56d8884d630ec2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
LeaveCriticalSection
PulseEvent
TlsAlloc

advapi32

BuildSecurityDescriptorW
OpenEncryptedFileRawA

setupapi

SetupDiGetClassDescriptionExW
SetupDiGetDriverInfoDetailA
SetupDiSetClassInstallParamsW
SetupQueryInfFileInformationW

user32

MsgWaitForMultipleObjects
VkKeyScanW
GetThreadDesktop

Sections

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ