bbe4a8537ba250c27b6b6a74fee0b2bb_JaffaCakes118 | Triage

Sharing

General

Target

bbe4a8537ba250c27b6b6a74fee0b2bb_JaffaCakes118
Size

297KB
MD5

bbe4a8537ba250c27b6b6a74fee0b2bb
SHA1

a36779f623174277c86e20200719ece16b6f25a2
SHA256

756f503b3c8d30d4ea951f00119a708a856b1bd88fa4c1b036563e7894b7c09e
SHA512

0762ea53a2f92cd5421f35a2c82a5325da1dc1025a45e9c7a04ec89b1b083860782c4feed942d3e7697de30ed33ae6b2eb0580ad9a28b5775e70ba4d4107eae2
SSDEEP

6144:2wporPkmzR4NyisnKbN6N3j1i1VZ428ygSNVmxxxxxxxxxxx:BpovuNyi86N6EVZ4Zypyxxxxxxxxxxx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbe4a8537ba250c27b6b6a74fee0b2bb_JaffaCakes118

Files

bbe4a8537ba250c27b6b6a74fee0b2bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

163374db16cd6182caa3e49507c066e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
CloseHandle
SetLastError
GetCommandLineW
GetTickCount
GetFileAttributesA
SuspendThread
LocalFree
HeapCreate
lstrlenA
GetModuleHandleA
CreateFileA
GetDriveTypeW
GetSystemTime
LoadLibraryW
SetEvent
GetComputerNameA
GetDiskFreeSpaceA
FindAtomA
CreateThread

advapi32

RegDeleteKeyA
GetFileSecurityA
GetLengthSid
RegQueryValueA
RegCloseKey
CloseEventLog
GetUserNameA
IsTokenRestricted
IsValidSid
RegEnumValueA
RegEnumKeyExA
CreateServiceA
RegCreateKeyExA

dsprop

CheckADsError
ReportError
MsgBox
FindSheet
ErrMsg

powercfg.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ