600edc55e4809fcf3f6ad7e26aab273a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

600edc55e4809fcf3f6ad7e26aab273a_JaffaCakes118
Size

70KB
MD5

600edc55e4809fcf3f6ad7e26aab273a
SHA1

c3275ba08fe2e92e840574705e3bbcda63ae05f0
SHA256

8e3ecb89ce00654b2f3a0bb41760bdd01ab8cd15080d33a467e2aec04fb3397e
SHA512

7aba818d3cbe17410f4f33e80409d2ceb89f04384fd67ca484157f189ed3b8c747d5f271ba19d4b0b292d024b5b1a7434d8e313ee98e871dc60703ccdfe64ebf
SSDEEP

1536:u3f1g50OALzvNZLP+gVgnpI/0kHD1l695qlRy5:u3iyOuzvvapY0okws5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
600edc55e4809fcf3f6ad7e26aab273a_JaffaCakes118

Files

600edc55e4809fcf3f6ad7e26aab273a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4aeb059ee03964593b393836c83aee46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarCmp
VarR8FromUI1
SafeArrayPtrOfIndex
SysAllocStringLen
VarI8FromDisp
VarI2FromUI8
VarR4FromDate

kernel32

LCMapStringW
GetProcessVersion
GetModuleHandleW
GetSystemTimeAdjustment
SetCurrentDirectoryA
VirtualQuery

comctl32

ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_Create
ImageList_Remove
ImageList_EndDrag
ImageList_SetImageCount
FlatSB_ShowScrollBar
ImageList_SetDragCursorImage

msvcrt

_resetstkoflw
_rmdir
_ismbbkprint
realloc
_mbscoll
_winver
??8type_info@@QBEHABV0@@Z
_ismbcl1

ole32

OleCreateLinkEx
StringFromGUID2
DllDebugObjectRPCHook
CoIsHandlerConnected
CoGetApartmentID
SNB_UserFree

advapi32

AreAllAccessesGranted
FindFirstFreeAce
MSChapSrvChangePassword
SystemFunction009
CredRenameA
RegGetKeySecurity
SetEntriesInAuditListW
WmiSetSingleInstanceA

Sections

.text
Size: 3KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 67KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE