b4ccf29870bde5bdbf61173b77207871_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4ccf29870bde5bdbf61173b77207871_JaffaCakes118
Size

25KB
MD5

b4ccf29870bde5bdbf61173b77207871
SHA1

15f7b212bdfc51189177f96d4eff77d67b18e72f
SHA256

fe5bc5aab0e542bf6172e1a82465e954c884b897e93f42ceb6fde71c90d0c8a1
SHA512

b3197307461e21537466f633e5f5c4644e18007e83773733737af8e63ac31c176668c0167a78ce8dca0c3757f7c18f47653e1673e4ad380c1c1f3fee41d853f0
SSDEEP

384:24sOYeUb6ceeizLTqU+NVcnbhjmxPfnk6sDxYO3/ibG:HsOYej+iTZ+j6ZmWdpKbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ccf29870bde5bdbf61173b77207871_JaffaCakes118

Files

b4ccf29870bde5bdbf61173b77207871_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE