95d0acb610be2cd0a319f58d7edfe39b_JaffaCakes118 | Triage

Sharing

General

Target

95d0acb610be2cd0a319f58d7edfe39b_JaffaCakes118
Size

361KB
MD5

95d0acb610be2cd0a319f58d7edfe39b
SHA1

692c81fffe4696b486c0e245b8904448505f41d6
SHA256

0dee414bd486dd4371dcb72f153b1cefc1ae7233d3e0fe923c3df51314e19775
SHA512

5e2ac3044dd014b7771c102114322ff3a65c6d11102988cebda17eb2344d456f62bb4b8c17905e6d58c087f6dab98c041c9fa1df9c7c80c708332daeb3d15882
SSDEEP

6144:WL6YaKKnuuBliQ7i1NodWRDOLclyjdCxvcE+yPWRptI4ychhUCuwc+v9xHD+GcRd:WeYadBZi1NodWRQkjWRptI4ychD2+v9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95d0acb610be2cd0a319f58d7edfe39b_JaffaCakes118

Files

95d0acb610be2cd0a319f58d7edfe39b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

585b006a65797c1c41c46902926a9a3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetTickCount
CreateMutexA
GetLastError
GetVersionExW
SetEvent
TlsGetValue
GetModuleHandleA
FreeConsole
GetCommandLineA
OpenMutexA
SearchPathA
CloseHandle
CreateThread
ReleaseMutex
DeleteCriticalSection
FindResourceExA
Sleep
FindClose
VirtualProtect

advapi32

RegEnumKeyExA
GetFileSecurityA
RegCloseKey
OpenEventLogA
EqualSid
IsValidSid
RegLoadKeyA
LsaClose
FreeSid
RegCreateKeyExA
CloseTrace
CloseEventLog
LsaFreeMemory
LsaSetSecret
RegCloseKey

loghours

DialinHoursDialogEx
DirSyncScheduleDialog
DirSyncScheduleDialogEx
DialinHoursDialog
LogonScheduleDialog

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ