04466acbb00772e3ca427be67f5bfa84_JaffaCakes118 | Triage

Sharing

General

Target

04466acbb00772e3ca427be67f5bfa84_JaffaCakes118
Size

3.6MB
MD5

04466acbb00772e3ca427be67f5bfa84
SHA1

92a36372a8557898a3e9ed988e51a280fc696ec8
SHA256

a58acd77d7b13624899074e65acea0c2a61091290c155b7798f4887674790f45
SHA512

5283c3ce7547d1d4604855a6335299d024c0a8d0c38b796155ffdfcf1d3f2ee34c49b83bb10f15c5ca1755f3d4bfb0234b8a4b03e6a5ada022154edc0edd28dc
SSDEEP

49152:Zh1RLwtLVa6coTEEBr1B2CYDqUAf3ib32K+T8h:ZhTQBbr17kql382R0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04466acbb00772e3ca427be67f5bfa84_JaffaCakes118

Files

04466acbb00772e3ca427be67f5bfa84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a54d2060b42afdb6dc5ba5116afc81d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
QueryInformationJobObject
IsBadCodePtr
GetDefaultCommConfigA
LocalFlags
GetLocaleInfoA
GetConsoleAliasesA
WriteConsoleOutputA
RequestDeviceWakeup
GetSystemInfo
GetConsoleMode
SetTimeZoneInformation
SetComputerNameA
FindResourceA
GetComputerNameExA
VirtualAlloc
EnumTimeFormatsA
GetConsoleFontSize
SetCalendarInfoA
UnlockFileEx
GetSystemDirectoryA
GetComputerNameA
SetThreadPriority
WriteProfileSectionA

d3d9

Direct3DCreate9

advapi32

CredFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 889KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ