86f1b648bc08c43022cc513f17255b3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86f1b648bc08c43022cc513f17255b3c_JaffaCakes118
Size

25KB
MD5

86f1b648bc08c43022cc513f17255b3c
SHA1

b6325c6b3bef9ce56f0a5258dd601cea0080d3e1
SHA256

9ba034eb23d4f1b1574ed3aa4c6bfe84788ba58ea34f1eb8f2f364daffd5de67
SHA512

025fe7f81d2d4bdc4ee73a0b5b0fd2014d19348a5d6946ae6a45e6b30d8b96c5c0c49b11eab2268290a82bdd9e97a2f0095eafdd0f8bcfd423baa0174adfecfd
SSDEEP

768:l5RuaH+XhgR25iQdnI10eMGo/YyPqbe0bG:l5RuSUgRNV1xTSMbe0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86f1b648bc08c43022cc513f17255b3c_JaffaCakes118

Files

86f1b648bc08c43022cc513f17255b3c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE