b95819ca061fbf40d4013704283f8818_JaffaCakes118 | Triage

Sharing

General

Target

b95819ca061fbf40d4013704283f8818_JaffaCakes118
Size

25KB
MD5

b95819ca061fbf40d4013704283f8818
SHA1

d2ce73923dd73d363c87f10dfb29f0f194a14368
SHA256

9fdb878be65b523fa617f051cbf856ed4a0e573591560ac08bfa12f730646862
SHA512

3834fe5ec9009b9f8d805e4f3d03349d3e470121b53cc7f1b2a908b9fd39b742334af7fdf8cac8fd7bb18be56ecc846f56ba2018a02f9846d8a8dfeae46da04a
SSDEEP

768:C4cSdmJPxijwkah23nMMQcz/V+x6XtcSwYbG:C4cSd3mo3/gx6XqSrS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b95819ca061fbf40d4013704283f8818_JaffaCakes118

Files

b95819ca061fbf40d4013704283f8818_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE