7664817c01e2d17278a2d0fdb274700f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7664817c01e2d17278a2d0fdb274700f_JaffaCakes118
Size

82KB
MD5

7664817c01e2d17278a2d0fdb274700f
SHA1

8593295c9f32bdfec3e7996570b50e89c589f4cd
SHA256

e783bfc85c877f0cfe9fe21bb84df77cc8e7e7485a5af0072b917bf9a174db31
SHA512

2e2ea0a068c5b662d7f2274c1dee2985cb8941b85cbe9962226d02b4ecc29c7b66e40f7abe8a406df22401c38acca6827c3591730761899eca0eca4b6eb992d0
SSDEEP

1536:BxfkkGo7Jw4XJte7YFVVac91sJl7ROEXx9qg7SC4owxF9bCWKqgvLx0FwXX:BxtjXJtdVasOOUx9HvwxFF+NvP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7664817c01e2d17278a2d0fdb274700f_JaffaCakes118

Files

7664817c01e2d17278a2d0fdb274700f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7afa9e3c0a619b5f17dcf91b785e2215

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetLastError
GetLastError

user32

GetIconInfo
CloseWindow
CreateMDIWindowA
ToAsciiEx

advapi32

AddAccessAllowedAce
CredWriteW
IsValidAcl
InitializeAcl

gdi32

SetGraphicsMode

authz

AuthzAccessCheck

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.txnhv
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ