c06ea4eaa52beefb3b6bfaa168ba2b4e_JaffaCakes118 | Triage

Sharing

General

Target

c06ea4eaa52beefb3b6bfaa168ba2b4e_JaffaCakes118
Size

25KB
MD5

c06ea4eaa52beefb3b6bfaa168ba2b4e
SHA1

0622ea419e17ede425256ec2a4adcfef6c155952
SHA256

2a7abd4b77d2186f1bf8ca440c556eaa9f1c0eff61de500d4ba3ce49046741ec
SHA512

8b07e6f0e2ea42fd478344e8b078a7bd2389f0c2936ff56cc86b46e99d754c62d51ba946ad41f2b0a2b9bd193a5289eef0dc754a0c374688f52764b66ce684f3
SSDEEP

384:ywP/1kkC5EXlG4DtJD1kySRyahjIC+vPc7Hld4HPQxxzA28v3sUMt/t7LWnibG:TVkvEXt+dRthjb+vPGlqH2Ar/+7LbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c06ea4eaa52beefb3b6bfaa168ba2b4e_JaffaCakes118

Files

c06ea4eaa52beefb3b6bfaa168ba2b4e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE