760b67efc3aadb52ecc0112c03ae67ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

760b67efc3aadb52ecc0112c03ae67ad_JaffaCakes118
Size

50KB
MD5

760b67efc3aadb52ecc0112c03ae67ad
SHA1

0f3678b96a640bd1e706ed1f8256939897a35306
SHA256

ec2392dfe6c59062bfcdc3c8de2a3bae1e73d0e1d80de9b9fbeef45cb5859c62
SHA512

b06bca1807680fccf97dde782776dc81459901f27446b4fd88d61ebfb0d16f1451b0851b768202b6953562247624290c07aa086128b1b38ecaa8a97b38deffb7
SSDEEP

768:fSQBm6MF80GxuUrZ0w6bgNKQD8qx8ccBU6IRsX9gFjdUgMK+l3I9DHFEE:fPm6T0PwAgN7D18cONIRMM8KN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
760b67efc3aadb52ecc0112c03ae67ad_JaffaCakes118

Files

760b67efc3aadb52ecc0112c03ae67ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

965bc641225008cbf4ae4e9dff519a5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeW
DisconnectNamedPipe
EnumTimeFormatsA
ExitProcess
FreeLibraryAndExitThread
GetConsoleCP
GetModuleHandleA
GetPrivateProfileSectionW
HeapCompact
InterlockedIncrement
LCMapStringA
ReadFile
ReleaseMutex
WritePrivateProfileStructW
_llseek

advapi32

GetKernelObjectSecurity
ObjectPrivilegeAuditAlarmW
RegEnumValueW
RegOpenKeyW
RegReplaceKeyW
ReportEventW
SetSecurityInfoExW

gdi32

CancelDC
EndPath
GdiGetBatchLimit
GetDCOrgEx
GetFontLanguageInfo
GetGraphicsMode
GetRasterizerCaps
GetTextCharsetInfo
GetTextColor
GetTextExtentPointW
SetEnhMetaFileBits
SetStretchBltMode
SetSystemPaletteUse
UpdateICMRegKeyW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE