12b51c096bca8ca51ee60e692fa908b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12b51c096bca8ca51ee60e692fa908b8_JaffaCakes118
Size

121KB
MD5

12b51c096bca8ca51ee60e692fa908b8
SHA1

1309de7d7d4b68a409d467d65b5732b625346be4
SHA256

df56571309767756617a188670d735563778f1e2900d1517617a617b31c672c6
SHA512

3b5697fb7cf304872c17c7aee44fa310083e16a76365e63cf5a47a340d4cf2db0a14152ec4796729adb54ee750a727bec8ee9000f162389581138d2d19af02d6
SSDEEP

3072:PgYMVW58uuBS+NI2YJPuEGCkSYIdvURSVQrZ:5MVWeuVjJGPeX63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b51c096bca8ca51ee60e692fa908b8_JaffaCakes118

Files

12b51c096bca8ca51ee60e692fa908b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

364b6ea79d1c023cd3554d095c535e1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildTrusteeWithNameW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptSignHashW
ElfBackupEventLogFileW
ElfOpenEventLogW
RegOpenKeyA
FreeSid

gdi32

GetBoundsRect
GetCharacterPlacementW
GetMetaRgn
GetDIBColorTable
GetFontAssocStatus
GetMetaRgn

user32

CheckMenuRadioItem
CreateIcon
DragDetect

Sections

.flat
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 75KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE