951ecb4fa8b91443899e34a30ccc61e7_JaffaCakes118 | Triage

Sharing

General

Target

951ecb4fa8b91443899e34a30ccc61e7_JaffaCakes118
Size

114KB
MD5

951ecb4fa8b91443899e34a30ccc61e7
SHA1

40b9825fb6057478f9bdf4f3054b1126f8b65c20
SHA256

6b1b620441757ada0ab79e49c30c46679de419bd6f21a97d3153839b3f95cfeb
SHA512

c2dc792e5be2fb8d51934fbd96129a141179a649994b5b172550c3f598f87ec30fd20b8f1988186d0f6b97d39bcf7630e200dd7cf834c6f64585f7d2423ff02c
SSDEEP

3072:hCHfO0+QwTwC71C+THE4WQir4CvCo+OWW5uNa/0M+xmBB:YHfL+l8S0abikCvCo+ObuNa8MK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
951ecb4fa8b91443899e34a30ccc61e7_JaffaCakes118

Files

951ecb4fa8b91443899e34a30ccc61e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da0ae31bfd28db018c06161de1212e20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlDeleteSecurityObject
RtlComputeImportTableHash
RtlAddAuditAccessAce

user32

GetWindowRgn

advapi32

RegOpenKeyExW
LsaDeleteTrustedDomain
CryptSetProvParam

gdi32

SetSystemPaletteUse
UnrealizeObject
SetGraphicsMode
SetDCBrushColor
SetArcDirection
PtInRegion
LineTo
WidenPath
GdiTransparentBlt
SetPixel
CombineRgn
CreateRoundRectRgn
ExtSelectClipRgn
FillPath
FlattenPath
GetArcDirection
GetBitmapBits
GetCurrentObject
GetGraphicsMode
GetStockObject

msimg32

AlphaBlend

activeds

ADsBuildEnumerator

rasapi32

RasAutodialAddressToNetwork

aclui

CreateSecurityPage

Exports

Exports

UkxpPRF0osLRW4PxA
Xr5Q6YOSTcUs
Z5Lt

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE