4c4e2ebf36ef3a92aecbe981874436ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c4e2ebf36ef3a92aecbe981874436ce_JaffaCakes118
Size

297KB
MD5

4c4e2ebf36ef3a92aecbe981874436ce
SHA1

c96f13ba536030bf3707428ecc22da2a322f83c8
SHA256

f9d8e02af9862f694e6b6141938cdadc369fbf463885bc6e39d4b5ed2c65c4ed
SHA512

aadaf6ec4e7f9c6d795213a36c74f7adbd2fdbdc6889e93c5866529319bc03c13513410ed5c23e2b7932d17abb2b3a5313826de8ce793c815799eb5c38045d0d
SSDEEP

6144:bRiUV4kNqoB0sTFy43xqv8wSh4pb7UA6AVv8r6:xVVlTFZ3xqv8wShOX6Iv8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c4e2ebf36ef3a92aecbe981874436ce_JaffaCakes118

Files

4c4e2ebf36ef3a92aecbe981874436ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

457e5947c1ba6eec9c42a1af68e4d07e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SetEvent
CreateThread
SetLastError
CreateFileA
SuspendThread
GetCommandLineW
CloseHandle
GetExitCodeProcess
GetModuleHandleA
GetFileAttributesA
LocalFree
FindAtomA
ResetEvent
GetComputerNameA
GetSystemTime
GetTickCount
LoadLibraryW
GetDiskFreeSpaceW
HeapCreate

advapi32

CredFree
CreateServiceW
IsTokenRestricted
RegEnumValueA
RegEnumKeyExA
RegCloseKey
CloseEventLog
RegQueryValueA
RegCreateKeyExA
RegDeleteKeyA
GetUserNameW
GetFileSecurityA
GetLengthSid

cryptui

LocalEnroll
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
CryptUIDlgCertMgr

powercfg.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ