2dbf324c7219946cdfcfccd12fefba4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dbf324c7219946cdfcfccd12fefba4a_JaffaCakes118
Size

747KB
MD5

2dbf324c7219946cdfcfccd12fefba4a
SHA1

0baf8dc970b0df6575c3d146e8ccaac66f82be0d
SHA256

b4c96bff7200bebf454a39ca12f2b42bfea8e2423aa7103e6348c630fc42032f
SHA512

6fc43703452b3c427e8786ce92d6b25ade1d207d3bdcf2c0f76797f222c400e9f9f10eb94cac03d27da70f8a7967f53f9c9881609ad37e0d7ad51f8d11566290
SSDEEP

12288:24YybYmzRf0vZWvc+EpYnBV1Kt1ZsliM4k458OT3ypk33KmBEgP6jm2M:24YybYcRfUZW0yBV1KVsgM4F58IUk33l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbf324c7219946cdfcfccd12fefba4a_JaffaCakes118

Files

2dbf324c7219946cdfcfccd12fefba4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6db505c097ecb2547ffea031d39f313c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CreateEventW
GetCommandLineA
GlobalFlags
WriteConsoleA
DeleteFileA
GetEnvironmentVariableA
CloseHandle
FindVolumeClose
SetLastError
FileTimeToSystemTime
CreateSemaphoreA
HeapCreate
HeapDestroy
EnumResourceTypesW
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
CloseHandle
SuspendThread

advapi32

RegDeleteValueA
IsValidSid
IsValidSid
IsValidSid
ControlService
IsValidSid
IsValidAcl
CloseEventLog
RegCreateKeyExW
IsValidSid
CreateServiceW
InitializeSid
RegEnumKeyA

ddrawex

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 740KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ