ace35b37316a0f5804070c5e6da30efb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace35b37316a0f5804070c5e6da30efb_JaffaCakes118
Size

45KB
MD5

ace35b37316a0f5804070c5e6da30efb
SHA1

f223985dacad2155ea579a4b68afb5a54c8144ad
SHA256

cbc839de07c1a1a8c0cedb4c2b0f48bac22ed88e3748acdd00d9d1b66d48047f
SHA512

9a7e2018229752c92441d4dc3675604cdb5b3eaad1343cdf75231a64564e2159e7a3f9736a30082613ad71c28ec61e168c0c6136cf60df10af6359cef33fd7ce
SSDEEP

768:gJJShCsFWEPG466PwxECxkP8fQA2H3d+c8a:sShrvPm6PoxkU6HKa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace35b37316a0f5804070c5e6da30efb_JaffaCakes118

Files

ace35b37316a0f5804070c5e6da30efb_JaffaCakes118
.exe windows:26138 windows x86 arch:x86

83373636a2a0c65dd4f7f1ad5349794f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorDacl
RegCreateKeyExW
InitializeAcl
RegQueryInfoKeyW
AddAccessAllowedAce
RegCloseKey
RegOpenKeyExA
RegDeleteKeyW

gdi32

PatBlt
MoveToEx
ExtTextOutW
SetBkMode
SelectObject
GetTextMetricsW

shell32

ShellExecuteExW
DragFinish
Shell_NotifyIconW
SHGetFolderPathW
SHChangeNotify
CommandLineToArgvW

kernel32

GetModuleFileNameA
GetModuleHandleA
VirtualAlloc
SetEvent
GetCurrentThreadId
GetCurrentThreadId
FreeLibrary
VirtualFree
GetCommandLineA
GetCommandLineA
VirtualFree
GetProcessHeap
LoadLibraryA

user32

GetSystemMetrics
LoadIconW
DestroyWindow
GetSystemMetrics
GetWindow
UpdateLayeredWindow
SetTimer

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ