a02fc8288235b7de1611b6d9a8314225_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a02fc8288235b7de1611b6d9a8314225_JaffaCakes118
Size

21KB
MD5

a02fc8288235b7de1611b6d9a8314225
SHA1

292f843ffd91dfce25121cbd78294a8375d616c7
SHA256

956aa04aa80e4d8db9815bc97cf0cf54da71ba4eabab03eaf4b78e41d00ee216
SHA512

77fd83ea356dcb0d72c0567a2104e8b2b85ecc6e9ef4a8b9087c63b5e601b6e753bf90b0065d57c1c0b26070dd166f065d8f78b6b89f9c5278a5f492df7115e2
SSDEEP

384:g3/krCWS4mWdjH3le3meC0B3IFOBupznczTuwq0qRnvT8Nu:W/q716bCA3I8Yco0cnr8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a02fc8288235b7de1611b6d9a8314225_JaffaCakes118

Files

a02fc8288235b7de1611b6d9a8314225_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b339327a4096664e5d18d8be6737b5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rtutils

TraceDumpExA

ntdll

RtlAdjustPrivilege
NtQueryDirectoryFile
RtlAddAccessAllowedObjectAce
NtAllocateVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE