6f2178631cddb0d761bc40f9d4133db6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f2178631cddb0d761bc40f9d4133db6_JaffaCakes118
Size

49KB
MD5

6f2178631cddb0d761bc40f9d4133db6
SHA1

fb01b69cc2b201658ee16c1cf54ff257566cf89c
SHA256

49f3be8981ff3c5381c473d88b3bc89bf3666740691e185b798be123f9a9a1d0
SHA512

c869bb5b7ca3bb55d4a254288e9fc8eac24105acddb7870c2b888fb6284de2809f9576396e091087c30c73886e4d242bad36267003f1e76bda597266dba7f8e0
SSDEEP

1536:JWyaAAVQB0LOIGVJPW8Fzx9qJ2jrzMHn:JWyaVQazGTWSOEjrzWn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f2178631cddb0d761bc40f9d4133db6_JaffaCakes118

Files

6f2178631cddb0d761bc40f9d4133db6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47dc0c3c035743ad1ea30b16895f6272

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapReAlloc
OpenEventA
ReadFileEx
SetCalendarInfoW
SetThreadContext
WriteFile
lstrcatA
lstrcmpi

advapi32

CryptContextAddRef
CryptEnumProvidersA
DuplicateTokenEx
GetOldestEventLogRecord
LookupPrivilegeDisplayNameA
RegEnumKeyW
RegEnumValueW
SetFileSecurityW
SetTokenInformation

user32

CallWindowProcW
DdeReconnect
EndPaint
GetClipboardViewer
GetMenuBarInfo
GetMonitorInfoW
OpenWindowStationW
SetScrollInfo
SubtractRect
UnregisterClassW
keybd_event

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE