8358a76842b75b83d2bd7b6bbc081d6b_JaffaCakes118 | Triage

Sharing

General

Target

8358a76842b75b83d2bd7b6bbc081d6b_JaffaCakes118
Size

36KB
MD5

8358a76842b75b83d2bd7b6bbc081d6b
SHA1

797ecc31aeb077b062fb5834f9860f505ac249c1
SHA256

c81cf9ca0f7215dd7ede9fa245b22b8ac79afbe52ddc4a85f330178075563f80
SHA512

4932d3aa7a055befe6bdb2d0dbb9ad1f9dde661989da349eaebb5b13b3c4ea0128e7dfb6567d2885a1f8be11aa9dbb9148e059d595e6444c4cee5cdc67dea11c
SSDEEP

384:3vhwsFHx/wxaDEEFmHNBRG0ErkAVCSLOIJ3amrd+TvmPCEfipYFAIAo8Wmqur7o/:3vtFC+JmHInrLV1omrd++FjA1zXPo/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8358a76842b75b83d2bd7b6bbc081d6b_JaffaCakes118

Files

8358a76842b75b83d2bd7b6bbc081d6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afa66b6bc6767034291e3e11b4096a92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetDriveTypeW
GetDateFormatA
CloseHandle
EnumResourceTypesW
ResetEvent
CancelIo
TlsGetValue
GetDiskFreeSpaceExA
GetModuleHandleA
FreeConsole
LocalFree
SetLastError
GetLastError
IsBadReadPtr
IsBadStringPtrA
GetCommandLineA
LoadLibraryExW
DeleteCriticalSection
VirtualProtect

advapi32

FreeSid
LsaClose
IsTokenUntrusted
CloseTrace
LsaSetSecret
RegCloseKey
CloseEventLog
OpenEventLogA
RegCreateKeyExA
AccessCheck
LsaFreeMemory
GetFileSecurityA
RegLoadKeyA
RegCloseKey

glmf32

glsBinary
glsChannel
glsCharubz
glsBlock
glsGetError

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ