649f0a9ca9fffcd820612c96cb07e93c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

649f0a9ca9fffcd820612c96cb07e93c_JaffaCakes118
Size

32KB
MD5

649f0a9ca9fffcd820612c96cb07e93c
SHA1

5e530b859d3e20acfde496577ad32ccfea8838f0
SHA256

e21d8c4af162ebc40ae2917f25e8e0ca14282d11fef6341b4e3ce7b9687e2e23
SHA512

4dc225ea234eaab2503dc01a16b02f1c3588c4d487a1a6f9cf9878bcd49d14cb95a3a63c731f08f7513ebb78f1c8a591c018aa622838f3bb4120f56106557923
SSDEEP

768:0FUFLr9w91oe5noHGOxO7ZtAeCm+hRj8qshgBi2c:VF3ACe5nCr8758tE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
649f0a9ca9fffcd820612c96cb07e93c_JaffaCakes118

Files

649f0a9ca9fffcd820612c96cb07e93c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

03e43fa159e2c21314fd63bd59c78d65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaAddPrivilegesToAccount
AddAce
AddAccessAllowedObjectAce
RegCreateKeyA
IsValidAcl
SystemFunction017
DuplicateTokenEx

comctl32

ImageList_LoadImageA
DrawStatusTextW
CreatePropertySheetPageW
InitMUILanguage
ImageList_Copy
ImageList_BeginDrag
FlatSB_SetScrollInfo

Sections

.idata
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ