c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118
Size

66KB
MD5

c0f5b3a69b8270d9578050b2926083c9
SHA1

14d4de76b7d4427b66014d2b67d79a417417880e
SHA256

22d765b0bd3eb1a62287d0f2f85c94ca0429885ff7b5e0655a928bf8f54fd6cc
SHA512

a08a7c52098623bf5c76fde4cf1d04e5cc525c0a707a34afa4e652b0bc0d67341d90b3c5a046e5eb21907bb9825e8ca892fb9fd3fc854aeb6f783baa9b42db43
SSDEEP

1536:KOpp4PVnLTNeki++eQqQRBwr9mb2mZsHpbS7VIF0jaD4:KMpULhfGVzRawKzpbShIFAA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118

Files

c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7d9c4fe2746374675d572cc6bd17b5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAce
ReadEventLogW
CryptGenKey
PrivilegeCheck
CryptSetHashParam

kernel32

Beep
CreateSemaphoreW
EndUpdateResourceW
CopyFileExW
GetACP
GetDriveTypeW
GetExitCodeThread

user32

GetCursor
GetAsyncKeyState
GetProcessWindowStation
MapDialogRect
SetMenu
SetClipboardData

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE