68d8e178342d35a1fc74bbb8d9ec02e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68d8e178342d35a1fc74bbb8d9ec02e1_JaffaCakes118
Size

25KB
MD5

68d8e178342d35a1fc74bbb8d9ec02e1
SHA1

d4b11a06dd9bf58fefe726b4eec3d8ca74025ebc
SHA256

6c9b616c85f0044bfbdac4db1fb274831faff2be59df9d8ff72b021e592f8549
SHA512

a9822944ad11945710b94c831730eb7f1ec52d27f871092279a830858a1fa026dcc55bd082cd9639d67a39e304f5dd2c809fcfb83489d805171a38785e3e1a55
SSDEEP

768:u7Euo3tUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUURUUvK+1eGXtLwROfxhfB:u7ESeOq5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d8e178342d35a1fc74bbb8d9ec02e1_JaffaCakes118

Files

68d8e178342d35a1fc74bbb8d9ec02e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff927df9041610851956a3da8805d6dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
ExitProcess
GetProcAddress

advapi32

AreAllAccessesGranted
AddUsersToEncryptedFile

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ