0aa6bea7b4e467e64a941bcc2a0285ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aa6bea7b4e467e64a941bcc2a0285ca_JaffaCakes118
Size

121KB
MD5

0aa6bea7b4e467e64a941bcc2a0285ca
SHA1

0a48609656f3397b1b44eedc465fff3d9063ef08
SHA256

74c6ad75615bd6c0f7e962ccfa701d8a7e4db0822107e39bad27c63c4f1ab69c
SHA512

25f60c600c4ac22022b61271d1e57221fdad505a3024c5f767f3eb1812657354f719655668e42264eef4dfe7773fb80c80da3234edfb5f0ab539ef5f80ad094a
SSDEEP

3072:DfSIbVj1RZYwNbAqp0zZLAoiy944cmDlf6m16FMmdGzkxbMq:rSWRZYwNbpqLAoiyK4c4f6JFMUGwxj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa6bea7b4e467e64a941bcc2a0285ca_JaffaCakes118

Files

0aa6bea7b4e467e64a941bcc2a0285ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

364b6ea79d1c023cd3554d095c535e1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildTrusteeWithNameW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptSignHashW
ElfBackupEventLogFileW
ElfOpenEventLogW
RegOpenKeyA
FreeSid

gdi32

GetBoundsRect
GetCharacterPlacementW
GetMetaRgn
GetDIBColorTable
GetFontAssocStatus
GetMetaRgn

user32

CheckMenuRadioItem
CreateIcon
DragDetect

Sections

.flat
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 75KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE