667aa90fe77fec431b983f48e6d64d76_JaffaCakes118 | Triage

Sharing

General

Target

667aa90fe77fec431b983f48e6d64d76_JaffaCakes118
Size

341KB
MD5

667aa90fe77fec431b983f48e6d64d76
SHA1

1dab5a3c2a421294638de6c58a8dfa25c29bb55b
SHA256

b9b95d9d90da751756b6a733fdec3a337697623fd0dc8cc34be1098d0ea9d05f
SHA512

00610282d1766d744130968ef32b85c1a0166498fbe664039fed67546a3977f13497b93b2e684902995fbd2b618493183d77f8c51a9445c9097be76d3a156fb3
SSDEEP

6144:8NJDLr55iJS+3cBms489NwP5NzmtVEc3wLHHwDpHmiwvRV:E/55iJncBmsT9MNOVEc3wM9miwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
667aa90fe77fec431b983f48e6d64d76_JaffaCakes118

Files

667aa90fe77fec431b983f48e6d64d76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f8f9943c68ef4a5655bf1469b9f0b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
TlsGetValue
lstrcmpiA
CloseHandle
HeapSize
GetTempPathA
GetStartupInfoA
ResumeThread
GetTickCount
HeapDestroy
SearchPathA
CreateHardLinkA
GetLastError
VirtualProtect
DeleteCriticalSection
SetEvent
ExitProcess
ReleaseMutex
GetModuleHandleA
GetThreadLocale
GetDriveTypeA

advapi32

LsaClose
LsaFreeMemory
IsValidSid
OpenEventLogA
LsaSetSecret
RegEnumKeyExA
RegCloseKey
RegLoadKeyA
GetFileSecurityA
CloseEventLog
AccessCheck
FreeSid
RegCreateKeyExA
RegEnumValueA
CloseTrace

urlmon

CoInstall
CoInternetGetSession
CoInternetParseUrl
HlinkGoBack
CoInternetCompareUrl

gptext

DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ