461544bda19f2f1ea44e1d376703e8cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

461544bda19f2f1ea44e1d376703e8cc_JaffaCakes118
Size

299KB
MD5

461544bda19f2f1ea44e1d376703e8cc
SHA1

dd18d15185a8b57adace738fa6d6eedd1e04ea6b
SHA256

ff02898bedf680fd1bff0395213181b41d6ef1c757a0b5e22691cc4b46002487
SHA512

da0493841ea4a0120a98d63b8b222b15ed553cfcfcdd6acb0bc2abfaa179b7a01c09e7308fa31248a52a24a06d1db3e1d58969466bc364e652cd7c5e5258a61d
SSDEEP

6144:rAE0tcuT8hupvtX1FtTB2QHzDDQak8mEu:0E/pMRJQeHTOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
461544bda19f2f1ea44e1d376703e8cc_JaffaCakes118

Files

461544bda19f2f1ea44e1d376703e8cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2056cd5b111d0ab09b95219671c1a274

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
GetDateFormatA
ResumeThread
SetLastError
CloseHandle
ResetEvent
GetDriveTypeA
CreateFileA
LocalUnlock
HeapCreate
LoadLibraryW
GetDiskFreeSpaceA
CreateThread
GetComputerNameA
LocalFree
FindVolumeClose
GetSystemTime
GetCommandLineW
GetModuleHandleA

advapi32

GetFileSecurityW
RegEnumKeyExA
IsTokenUntrusted
GetLengthSid
RegEnumValueA
CloseEventLog
RegCloseKey
RegQueryValueA
GetUserNameA
CreateServiceA
RegDeleteKeyA
FreeSid
RegCreateKeyExA

clbcatq

CheckMemoryGates
ComPlusMigrate
DllGetClassObject
SetupOpen
SetSetupSave

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ