a4224577abaffcd09d455932a707d0e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4224577abaffcd09d455932a707d0e0_JaffaCakes118
Size

371KB
MD5

a4224577abaffcd09d455932a707d0e0
SHA1

0892887f12cb24bbe25d147d1e27ab6cfcf4cb47
SHA256

7ef96558e01e0be83d29cc1672e519bef5953bc7d7c1b610a06da4dfce4261be
SHA512

d1d12df73aaf86a536747f06c2ac044cff0496f02de4f296a78024b2551b3cbaf184c0bf70da713251a6a8e2b613168bee7adc323e799706d74f479b5cca1934
SSDEEP

6144:pfUe6W+C71VFvBMEblyI+c3aY2ysYTlRUhHP5pnjgB0+y2ncwSsRMr75T1Dnk/N:pfUfCJV9blH2nvHP5VV+dSsyx5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4224577abaffcd09d455932a707d0e0_JaffaCakes118

Files

a4224577abaffcd09d455932a707d0e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5889801be72d31babfbd0b1b3cf8fc76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CredFree

dhcpcsvc

DhcpUndoRequestParams

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

user32

GetMessageA
RegisterClassA

ole32

StgOpenStorage

Sections

.edata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ