05e168fd74d45b856efb10b44ffb9b6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e168fd74d45b856efb10b44ffb9b6d_JaffaCakes118
Size

108KB
MD5

05e168fd74d45b856efb10b44ffb9b6d
SHA1

a08547e3e6ebcd68dafd5b28170051e951d696c9
SHA256

e5a4cb0d50f0cf8492073ca9f7757365f73f8ec10d29bf3fbdc6fe8fa82b0885
SHA512

bb461f8c166bdd7f35b7f1772853241a65bd3939d5feb295af5935d130c2f2dac69a21c8e75cf88e6848c4bd5522cbad8f5ff07b98304953c1cc3f97f86e2f57
SSDEEP

3072:vn3wOQ4qv0rAe8t3m0oO2YXrEewm4qSqUd+GTB+hjZZn:vn3wWqvSUt7oYXgewngGEhtZn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e168fd74d45b856efb10b44ffb9b6d_JaffaCakes118

Files

05e168fd74d45b856efb10b44ffb9b6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d83426818b98b2698a3c837dc4c0ac97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildSecurityDescriptorA
CloseServiceHandle
CreatePrivateObjectSecurity
CreatePrivateObjectSecurityEx
AdjustTokenPrivileges

user32

ChangeMenuA
ChildWindowFromPointEx
CloseClipboard
CopyImage
CreateDesktopA

Sections

.text
Size: 69KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE