3738f25d14885e8f22958207ec4f9b4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3738f25d14885e8f22958207ec4f9b4c_JaffaCakes118
Size

108KB
MD5

3738f25d14885e8f22958207ec4f9b4c
SHA1

1d159d49f935a51753beb1f1aeab49309c4d25b3
SHA256

125150d3eda6c79fd8b467f0ba1b1b1ddc49bee7636d62a5b0c0df4fec19d45b
SHA512

497f5516b99e8555958fdbf7aeaafacfd238900302929a649b09dd2b2d4ba1ce7d64b1f848bcc7f8c57e2b6b74f28a356bf02d16707f525f9207eb75e3b2a7b2
SSDEEP

3072:VGphDkUtFHwTjgtKRTHKKoQqzKsqPK4VpbPe:VGHHtFQwwTHH5qRa9Pe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3738f25d14885e8f22958207ec4f9b4c_JaffaCakes118

Files

3738f25d14885e8f22958207ec4f9b4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d83426818b98b2698a3c837dc4c0ac97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildSecurityDescriptorA
CloseServiceHandle
CreatePrivateObjectSecurity
CreatePrivateObjectSecurityEx
AdjustTokenPrivileges

user32

ChangeMenuA
ChildWindowFromPointEx
CloseClipboard
CopyImage
CreateDesktopA

Sections

.text
Size: 69KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE