c8e15b2af8127530ad15f5b9411cac21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8e15b2af8127530ad15f5b9411cac21_JaffaCakes118
Size

812KB
MD5

c8e15b2af8127530ad15f5b9411cac21
SHA1

d4612fc8ffdff8d6dc292147792a3dc1e3cf3101
SHA256

ec2a1a0a7822fa355cc3dc79c6fc9428935daebd00774c92b444cb26fca335ee
SHA512

0365f0d926c8ae3e9d6935c6541fb273f47a6c087569189f11dd88cb91410a6d37ed4764a58085f771eb692f3afcc6a4b705555212b3bc7680ee0f1ed4271210
SSDEEP

12288:QBEjt6hsxaf11lAaywjFwk1i7/ugGNPWUKAmYbYaRhiC6RPytav:AEjtFxaf11lACFluEmYbYaCCMPyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8e15b2af8127530ad15f5b9411cac21_JaffaCakes118

Files

c8e15b2af8127530ad15f5b9411cac21_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1b728a7bd083aef515863409418aeaf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetPrivateProfileIntW
DeleteFileA
LeaveCriticalSection
SetCurrentDirectoryA
GetConsoleTitleA
SetVolumeLabelA
GetShortPathNameW
SetStdHandle
HeapCreate
SetEnvironmentVariableA
lstrcpyA
LoadLibraryA
FoldStringA
CreateMutexW
GetCurrentProcess
GetStringTypeA
GetTickCount
GetVolumePathNameW

aaclient

g_fnStartTransport
OpenKeyReaderWriter
OpenKeyReader
LoadClientAdapter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ