a9ab797bd221ee9d2057cda39147cfb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9ab797bd221ee9d2057cda39147cfb0_JaffaCakes118
Size

80KB
MD5

a9ab797bd221ee9d2057cda39147cfb0
SHA1

295e8bfd5a3275d38b5ad5b85e4ff8d9230921f3
SHA256

38c97c60f9927d50c1c6392d0c61a6c537b6884576af94691351bcec534899c7
SHA512

5f9e9a8e31a43c46ae7ec1f35c89334d2910d8773bc10f84e4f4c62d709083c0ef3d46e3a44e78200480290edc9488fb80313c36ae8b663a204d2f6b93a5097d
SSDEEP

1536:TWDnrX5/0Ir086ItRvtjMhkjw28lrwMXUjggvNJVp40weZX1W:wjOk5VvdW4w5O5T5p40webW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9ab797bd221ee9d2057cda39147cfb0_JaffaCakes118

Files

a9ab797bd221ee9d2057cda39147cfb0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

76617e1a081d29216f976c00e1630357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msdtcdbgdbg.pdb

Imports

user32

MessageBoxA
wsprintfA
CharNextA
LoadStringA
CharPrevA
MessageBoxExA

advapi32

GetSidLengthRequired
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
SetFileSecurityA
SetSecurityDescriptorDacl
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
RegQueryValueExA
AllocateAndInitializeSid

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ