cfa3873960067aca9b15ca4b4adb1e1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfa3873960067aca9b15ca4b4adb1e1b_JaffaCakes118
Size

340KB
MD5

cfa3873960067aca9b15ca4b4adb1e1b
SHA1

8e3790934e889ef9a9f184f7ad03680ca8effb5e
SHA256

3707293ac9c270bee55b1473f6edb9e352b2ebc8015c20008a6a221c0af2578b
SHA512

13f15c58c5f526125437a7eb17f61f733a33381f6968b9234f8681ab4f950bf0335df81c02e86d9ffd93d8ead10a436e8161f328f7573d66a7a0e4de7d48b337
SSDEEP

6144:gZKL40LvTlaIAvyjkJ0y4yeWLQ6wyl8te5IHLw5C7U2:qa40Lv4IAvMkmyBeWZJULwsj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfa3873960067aca9b15ca4b4adb1e1b_JaffaCakes118

Files

cfa3873960067aca9b15ca4b4adb1e1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a34362febb5b900b3f5282440c82e7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
HeapCreate
GetLocalTime
HeapFree
GetLastError
GetModuleHandleA
HeapAlloc
GetProcAddress

advapi32

CryptGenKey
ConvertStringSidToSidA
ConvertSidToStringSidW
DeleteAce
CreateWellKnownSid
CryptExportKey
CryptDeriveKey
CryptCreateHash

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ