75e2ac958cd47b0401a3905de59bfda7_JaffaCakes118 | Triage

Sharing

General

Target

75e2ac958cd47b0401a3905de59bfda7_JaffaCakes118
Size

21KB
MD5

75e2ac958cd47b0401a3905de59bfda7
SHA1

78050cec04a31372a0afece2e575433fc94dd84d
SHA256

1efe0d525e7d2b881860298e6a1cc5c7fc88c7aec0bd96dcab8d7a3d5eef52fd
SHA512

f3ff174feb688b4b3977ade2a9c387ae5279918521e8c23118dbb4282fad7366f026a7ed771d0bae49bbb2bf465d5e5928f9c0097f4f0365ad8514ce516e1cbb
SSDEEP

384:Vzx4WS4mW2bpa97rP2UHimfd6dxaLjEOkxTloAIgTGzOv0GUe4:7Jf1rJimwOWIgTGas/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75e2ac958cd47b0401a3905de59bfda7_JaffaCakes118

Files

75e2ac958cd47b0401a3905de59bfda7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0115d0677487d40b66ec82674ef4a280

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

netapi32

NetDfsSetSecurity

kernel32

GetLastError
FormatMessageW

ntdll

NtAllocateVirtualMemory
RtlAdjustPrivilege
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce

setupapi

SetupDiGetClassDevsW
SetupDiSetClassInstallParamsW
SetupDiCreateDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ