ac38f12c1733068e9a8b58100f610921_JaffaCakes118 | Triage

Sharing

General

Target

ac38f12c1733068e9a8b58100f610921_JaffaCakes118
Size

356KB
MD5

ac38f12c1733068e9a8b58100f610921
SHA1

b8b70fd8567522467256b28d9141a97a67d5406a
SHA256

43c1e5c3a764a054825f3db8f70d5726d640cacf7beadaa6dc33b9b0669c125b
SHA512

0c425b371cf83b515adeef43c372b6428a711768a6b0a579e29cdbbfb4a40bef434fcbc4c1457d7bf4d3fa4f1654dd55bfa274cc512c8b4f0e25271322614516
SSDEEP

6144:9VMDDcUWLtrGHPPJ6y2kpFAmaZ5O2fYQZm:zODVIQPPJ72mFYO2fDc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac38f12c1733068e9a8b58100f610921_JaffaCakes118

Files

ac38f12c1733068e9a8b58100f610921_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb34d8e3b3eb92b30586e79937f29b91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
WaitForSingleObject
VirtualFree
GetSystemTime
ExitProcess
GetTempPathA
VirtualProtect
ResumeThread
GetLastError
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
GetFileType
GetPriorityClass

user32

OpenIcon
IsWindowUnicode
GetParent
InSendMessage
GetWindow
LoadIconA

gdi32

SelectObject

advapi32

CopySid
AddAce

ole32

CoInitialize
CoUninitialize

msvfw32

DrawDibStop

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ