faa4b9f684d1bd5d9fc9a2594bd22e46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa4b9f684d1bd5d9fc9a2594bd22e46_JaffaCakes118
Size

344KB
MD5

faa4b9f684d1bd5d9fc9a2594bd22e46
SHA1

202bb20912a34d73c561f2588a40be227b6f000f
SHA256

7bdfabf552486fdfc91691434392a4afcb7cbf37878e657648cf3fa47b78cfa8
SHA512

9cf28ae5d1f25cf99114f9bf4e9e4db3351674b635d626837b853b6eec076bdc78b7e0aa905e38d44a136007fe6baa9474cb51516a2812bd615a909179570877
SSDEEP

6144:rENZ+GEaD0ZmkqcKnyJ3kgCZrxxypbNhO2roC87Nk5QNwaneh9Xd+l:rENZ3neqZnyhUIelC8kuwOeMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa4b9f684d1bd5d9fc9a2594bd22e46_JaffaCakes118

Files

faa4b9f684d1bd5d9fc9a2594bd22e46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b53af7395cccfc07e9646fce6a478f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetSystemDirectoryA
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidA
DeleteAce
CopySid

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ