052fbb6436544fedb9e9f95ca21a7510_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

052fbb6436544fedb9e9f95ca21a7510_JaffaCakes118
Size

97KB
MD5

052fbb6436544fedb9e9f95ca21a7510
SHA1

815f0c48b787c9f795bfa4c884e49d219fd27ee1
SHA256

759597e5595bca7fbba8f010915008ad52ae5f0d43bb613479cc0a641d290ab2
SHA512

27ea84b0befb5d23c819786c672f5f85d991b48546ba804bfdf8cebdc779875212756289521a3c13c03aff44e33e3e854dc98af714a24a0b78043ca46a98794c
SSDEEP

1536:DEApwe6elwrKvwFNTXRYcegyrBplztu6i+2CahuaxhVQKxNxcwHt:DEElwKsygc7lzt4uv6heixcat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
052fbb6436544fedb9e9f95ca21a7510_JaffaCakes118

Files

052fbb6436544fedb9e9f95ca21a7510_JaffaCakes118
.exe windows:4 windows x86 arch:x86

466fb9182ebb9920f1ddd53bf2ea428b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
PeekConsoleInputA

ntdll

RtlPrefixString
RtlZeroHeap
RtlSizeHeap

user32

RealGetWindowClassW
SendNotifyMessageA

activeds

ADsBuildEnumerator

oleaut32

SafeArrayGetRecordInfo

shell32

SHFlushSFCache
SHAddFromPropSheetExtArray

scesrv

ScesrvInitializeServer

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE