847ac6af7eb2d006ffe3d3c3c7f93ba5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

847ac6af7eb2d006ffe3d3c3c7f93ba5_JaffaCakes118
Size

69KB
MD5

847ac6af7eb2d006ffe3d3c3c7f93ba5
SHA1

cef3ddb685ebb78db09eaa2537598f4baacf2f0a
SHA256

92faf7d6517c5559ec68063de6d774385910687effa886ae6dc58d17561eae4f
SHA512

998cfeae760a4f4ee08a4cebb9133682c0038c83c0de289542dbc469053c0a4c4da672d8f501f0f7852b79d56937038373256b05ec38098dd3f5b6869e752795
SSDEEP

1536:dLX744kPMEj7R8by6J9tCOu9KMe7HrqOQoudEJJY/r:dItPMkR8l9pF7Hrqd7dk+/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
847ac6af7eb2d006ffe3d3c3c7f93ba5_JaffaCakes118

Files

847ac6af7eb2d006ffe3d3c3c7f93ba5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

357d3264a246450a648dba8858d447aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
ReadProcessMemory
lstrcpyA

advapi32

ElfReportEventW
ReportEventA
ClearEventLogA

ole32

CoFileTimeNow
IIDFromString
IsEqualGUID
IsValidIid

setupapi

SetupDiGetDeviceInstallParamsA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleLoadPicture

user32

RegisterHotKey
ValidateRgn
CharNextW

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ