94cb1ecfd9e4c62df7043d29c6ccddfc_JaffaCakes118 | Triage

Sharing

General

Target

94cb1ecfd9e4c62df7043d29c6ccddfc_JaffaCakes118
Size

301KB
MD5

94cb1ecfd9e4c62df7043d29c6ccddfc
SHA1

25a3596d66a098c0cc504bb7a621e04dc3be02bc
SHA256

e93b78455778017b98101023cd2f7f828527202bba988f4e9d0c5e294dfa5b26
SHA512

a47b227455ba9801bbb7de5c070957300a8fd572ca7bf6b935803e49e85888715ce35ac21e78f9e9cf0b6a1b6b1e55697d21b4a5e36ed2e59f738f570752b620
SSDEEP

6144:hMj0vVvot4KfUUFftaLph7f0eGUimTwiiRW3hx/REh:hMjYVw9fU2ULphb0aimiohD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94cb1ecfd9e4c62df7043d29c6ccddfc_JaffaCakes118

Files

94cb1ecfd9e4c62df7043d29c6ccddfc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b9b771bcf5e78d884a0d5afdd97341d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetClassLongA
MapWindowPoints
SetClipboardData
GetCapture
CopyAcceleratorTableW

kernel32

GetDateFormatA
GetSystemTimeAsFileTime
VirtualProtect
SignalObjectAndWait
GetCalendarInfoW
TermsrvAppInstallMode
ChangeTimerQueueTimer

advapi32

RegDisablePredefinedCache
WmiQueryAllDataW
CloseServiceHandle
LsaEnumerateAccountRights

Sections

.text
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ