5d02e6b2631023c478aa2ed5226dec8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d02e6b2631023c478aa2ed5226dec8c_JaffaCakes118
Size

63KB
MD5

5d02e6b2631023c478aa2ed5226dec8c
SHA1

692fc55ff5c851dd027753da488efc29442b7c27
SHA256

677ed733cc03c5ec77970bbe14f3df26e27ad2b687002b68a4688d1decc907c1
SHA512

96ba49eed89fea677d9bf54f4f565e3c4a8b86ad1f543a868ee4c55bae3efd0157e54216c00fdfe33efc13ebbfda74f9d9d47d0d308b55d36c604c64f9d463e9
SSDEEP

1536:R40IPAAQUrAYLS9y+mL9Nls6V+hctK6l0RhYwJ22:A4ADxLOy+mL986VMctK40Rh3Jp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d02e6b2631023c478aa2ed5226dec8c_JaffaCakes118

Files

5d02e6b2631023c478aa2ed5226dec8c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

27d7f3c62685b6fb6a1176ed28fc7e16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetNamedPipeInfo
WaitForMultipleObjectsEx
TerminateJobObject
GetFileSize
CancelIo
GetLastError
_lwrite
GetLastError

advapi32

InitializeAcl
RegisterServiceCtrlHandlerW
QueryServiceLockStatusW
CredWriteW
ReadEventLogW

user32

GetSubMenu
DlgDirListA
GetWindowTextLengthW

gdi32

SetGraphicsMode

apphelp

ApphelpCheckExe

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jztbrpz
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ