4ce3b05bdd6ef951cfc02fc4f8ad858b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ce3b05bdd6ef951cfc02fc4f8ad858b_JaffaCakes118
Size

323KB
MD5

4ce3b05bdd6ef951cfc02fc4f8ad858b
SHA1

2925bc4152630289b6fe7fe7038e1eda3e6890db
SHA256

bcc06f609de30fe147257cd6984136cfe03e9048d0317ad910f74fa27c6a3936
SHA512

ac49c90f7c2e1c37722f4fe03d79fdcadcfae53111fc8560882c6650f6cdb8911c806ee8e65f8012976403cf6bb35450d5f3e38ebccadf1a97f651526b44eb38
SSDEEP

6144:znO+E6CxszigTmKXVkdmB8UEpGi9GYCaABUUm6tVyE3YOrYuybgvslS000000008:DE6Cxjga6V3B7SlJAVv3YRfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce3b05bdd6ef951cfc02fc4f8ad858b_JaffaCakes118

Files

4ce3b05bdd6ef951cfc02fc4f8ad858b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a44ef605bb2e606117c75e0747e5fc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
FindAtomA
GetDriveTypeA
LoadLibraryW
CreateThread
GetComputerNameA
CreateFileA
GetCommandLineW
GetFileAttributesA
GetSystemTime
SetLastError
CloseHandle
HeapCreate
LocalFree
GetDiskFreeSpaceA
lstrlenA
GetExitCodeProcess
SetEvent
GetModuleHandleA
SuspendThread

advapi32

RegQueryValueA
GetFileSecurityA
GetLengthSid
RegCloseKey
FreeSid
RegCreateKeyExA
RegEnumValueA
IsTokenRestricted
GetUserNameA
CloseEventLog
CreateServiceA
RegDeleteKeyA
RegEnumKeyExA

dsprop

ErrMsg
MsgBox
ReportError
CheckADsError
FindSheet

bthprops.cpl

BluetoothEnableDiscovery

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 313KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ