a404fdb233bd15f0d23efe2f2770ed5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a404fdb233bd15f0d23efe2f2770ed5b_JaffaCakes118
Size

568KB
MD5

a404fdb233bd15f0d23efe2f2770ed5b
SHA1

6d4c510d94161851e4e9335859ccd9efbe47c216
SHA256

9736e8a529bad46259713002386f1600b16608a85280bbe4483297f42c784ff6
SHA512

cfcde359bf5586eff1a0d33dfe99eaa1119d7acc73c3a1beb401008884812612167e11cbab8a57ce2b9a4bca97a8c4977994405b843bed9e8cb00abfcddfb590
SSDEEP

12288:n9ppwBYXGwqgKVtU3JwRI5YLnkHmdVUxY7iMhPwdR7ADUWSj3pG0w:9ImXdqgmC3JwRI5YLnkHEVUueMJpDwj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a404fdb233bd15f0d23efe2f2770ed5b_JaffaCakes118

Files

a404fdb233bd15f0d23efe2f2770ed5b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0d727d1ea768cb908587df0374525cf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_chkesp
_ctype
_eof
_except_handler2
_CIacos

advapi32

AdjustTokenGroups
CloseEventLog
CryptGetHashParam
CryptSetHashParam
DeleteAce
DuplicateToken

kernel32

WinExec
ExitProcess
TerminateThread

Sections

.textbss
Size: - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 436KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE