be2ae69aa9f763f88fd3ec9c3142c833_JaffaCakes118 | Triage

Sharing

General

Target

be2ae69aa9f763f88fd3ec9c3142c833_JaffaCakes118
Size

36KB
MD5

be2ae69aa9f763f88fd3ec9c3142c833
SHA1

a6a405785fa7b3d998774264c1cab1e6feaa4a47
SHA256

6c22cc1a30b289a39f817823718dcb134060b2d1bb4f2245850660f05c4b2349
SHA512

d61df7179a591efa03aac3645608f07fd74e4719c9bf0776066ab92874f6a20d943c25df9e69a4fb65a5d5c6a841a24d0bc187b22f93047ada8f0c4f1cdb69a8
SSDEEP

768:Gp/EsmJJfnkWC3S4JLKoAfC0IV1teh6rXRG:o/3mJFnkLlwoEC0KehoRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be2ae69aa9f763f88fd3ec9c3142c833_JaffaCakes118

Files

be2ae69aa9f763f88fd3ec9c3142c833_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61c465e3917573cbe35d33953f44d807

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAce
DeregisterEventSource
DuplicateToken
GetCurrentHwProfileA

user32

CharNextW
GetSubMenu
GetWindowLongW
SetActiveWindow

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rel
Size: 19KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE