a5b5e5225cdb76468424f8e9d32e1aa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b5e5225cdb76468424f8e9d32e1aa1_JaffaCakes118
Size

30KB
MD5

a5b5e5225cdb76468424f8e9d32e1aa1
SHA1

26c25d8c461b800446d99a75a010b89a7dac3bbb
SHA256

4292bf48788c9dff76a47075cca58e91cc77dc700926182409f8540afe5248cd
SHA512

0157d1c821e244c69af7c0bfa49b656495c3958df046760567835b9b37fb1e1e27173a16dbd65b62b608c62ee9d3546d01b9f77b6d1355d140c4257ff21255ea
SSDEEP

384:4tcmsF8a46hwxaDEEFmHNBRGGBnrMD+bS8VGS6PbCTvmPCEfip:4yF8aQ+JmHlnQD+bS5Njy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b5e5225cdb76468424f8e9d32e1aa1_JaffaCakes118

Files

a5b5e5225cdb76468424f8e9d32e1aa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1502f9f3d12af4cb8646e6d00ee1c3d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
EnumResourceTypesW
SetLastError
LoadLibraryExW
TlsGetValue
GetDateFormatA
GetDiskFreeSpaceExA
GetModuleHandleA
GetCommandLineA
GetLastError
FreeConsole
IsBadStringPtrA
ResetEvent
VirtualProtect
IsBadReadPtr
DeleteCriticalSection
CancelIo
CloseHandle
LocalFree
FindClose

advapi32

OpenEventLogA
LsaFreeMemory
FreeSid
IsTokenUntrusted
RegCloseKey
LsaSetSecret
RegCreateKeyExA
AccessCheck
CloseTrace
CloseEventLog
GetFileSecurityA
LsaClose
RegLoadKeyA
RegCloseKey

glmf32

glsBlock
glsCharubz
glsGetError
glsChannel
glsBinary

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ