dc98a4b25b6078c7615217280b29cdbc_JaffaCakes118 | Triage

Sharing

General

Target

dc98a4b25b6078c7615217280b29cdbc_JaffaCakes118
Size

395KB
MD5

dc98a4b25b6078c7615217280b29cdbc
SHA1

39e914c0475b97e9ed83f50a624c449629b2a249
SHA256

17607801653e41a80875fb167e75f57fe9b6e53d40f32eb3c6e0b165b35a6f31
SHA512

7587014a95dde2be81514517d529cde7e545d271b2ffcb894353d8edd0df2cac9ff9d5d731c8c82ae7c4b4e54d6a18124276c8313a1e1b07750b97c642710a15
SSDEEP

12288:S8f2K49u0O5x3JNwQMhCgp3sROEijkgSPM9S/qsY:T49ut5nMCq3M3gDSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc98a4b25b6078c7615217280b29cdbc_JaffaCakes118

Files

dc98a4b25b6078c7615217280b29cdbc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

baf80dc508686b38d0f550a959036252

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

kernel32

CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
SetDllDirectoryA
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement

advapi32

CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ