4a8281eeaf2b8b0687fad283ba29eb3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a8281eeaf2b8b0687fad283ba29eb3e_JaffaCakes118
Size

360KB
MD5

4a8281eeaf2b8b0687fad283ba29eb3e
SHA1

5fa83f840eb1c168599d85f9cd4d3178e54bbed2
SHA256

1d50b0876db9f5b94cbe377ff840e69192d081d92b6bd6f3cd5994125a0b3258
SHA512

2ac51a1736196720883ed4ee383059b2c0867472ae5a9f2eb8855ebecfff9b3db5225356d8e0b229ef87983ef4fd9f4662a5eda8812651849c5b8bd5d24df4f0
SSDEEP

6144:RpaDZ6xxIBxcLHLbeCEPEYRtB6wrfVzahpl0FNhw4YeG669G0R1:j+04vcLHL4JYwrfVzahcFNhwJeGeK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a8281eeaf2b8b0687fad283ba29eb3e_JaffaCakes118

Files

4a8281eeaf2b8b0687fad283ba29eb3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2af979d6a1625f953490fa44aa6c00c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
HeapCompact
ExitProcess
FindNextFileA
GetProcessHeap
SetEvent
VirtualAlloc
GetSystemTime
OpenMutexA
HeapReAlloc
SetFileApisToANSI
VirtualProtect
GetModuleFileNameA
GetProcAddress
SuspendThread
GetCurrentProcess
GetSystemDirectoryA
HeapFree

user32

GetTopWindow
GetWindow
IsChild
FindWindowA
IsWindowUnicode
LoadIconA

advapi32

CopySid
AddAce

ole32

CoUninitialize

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ