a73506b7d5424b5564b6c6f7d54105ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a73506b7d5424b5564b6c6f7d54105ef_JaffaCakes118
Size

176KB
MD5

a73506b7d5424b5564b6c6f7d54105ef
SHA1

0a433227dc6611159c02fb60af8e6a1854ece9df
SHA256

117357354510d58959fca9560eda2269936d3d494dbda919144863d42a792ac7
SHA512

63e63149d00bf9fcbd31b54f57a98b07817ab5c039069f6fcb8ebb81359173abf3ba0bb91bf7290a5c15f50f66b4f21d72c8c5ebe0fa12a86a67a39c2e55a14f
SSDEEP

3072:kDjoW/NDctWzXAagSUJ1SgyoSwcrjztFHK9J6W6GFub9hAHqd4PC:kDjbvOS6GwcvBRK9J6RhhA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a73506b7d5424b5564b6c6f7d54105ef_JaffaCakes118

Files

a73506b7d5424b5564b6c6f7d54105ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eaaa2da5f7e40b425a99949594c58c41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
GetStartupInfoA
GetACP
ExitProcess
IsBadStringPtrA
UnlockFile
GlobalFindAtomA
OpenJobObjectA
LZInit
HeapAlloc
GetVersion
SetConsoleDisplayMode
GetModuleHandleA
VirtualAlloc
VirtualAlloc
GetOEMCP
GetFullPathNameA
GetCurrentProcess

imagehlp

ImageGetCertificateHeader

authz

AuthzOpenObjectAudit

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ