ae37e689e7ffc02dbd13132d16de4e70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae37e689e7ffc02dbd13132d16de4e70_JaffaCakes118
Size

120KB
MD5

ae37e689e7ffc02dbd13132d16de4e70
SHA1

ce24b45d25867b3fcca0b32abe7ba8a551b5cac8
SHA256

65ca597ec5d7ff97764eafa0ddb99104704b480ade2eca728527263520ad2763
SHA512

3c53373759e19d16cdda80f69f15a6a110f0e33c72d05b6d3c2d87147e76530e14dcf906312eabec8d2e0b1fc642010008c665dcb10913e0f87ee423294f599e
SSDEEP

3072:HD+FDh4RZROcptby3Kh0hrYQ/RusERgofwm2:H60Fjtby3KLb8oP2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae37e689e7ffc02dbd13132d16de4e70_JaffaCakes118

Files

ae37e689e7ffc02dbd13132d16de4e70_JaffaCakes118
.dll windows:4 windows x86 arch:x86

76617e1a081d29216f976c00e1630357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msdtcdbgdbg.pdb

Imports

user32

MessageBoxA
wsprintfA
CharNextA
LoadStringA
CharPrevA
MessageBoxExA

advapi32

GetSidLengthRequired
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
SetFileSecurityA
SetSecurityDescriptorDacl
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
RegQueryValueExA
AllocateAndInitializeSid

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ