556130479babcbcaf90c3b2250696c44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

556130479babcbcaf90c3b2250696c44_JaffaCakes118
Size

299KB
MD5

556130479babcbcaf90c3b2250696c44
SHA1

76f768d2b9e7446e6f52ed3d91b3cf50297a0c6b
SHA256

f0957247e427a78224b0ae61eb6fe842d7f5ffcc950bb7d9dc646ed08f5198bf
SHA512

7e744884f948ec60e100226644c808a49bc42f8f13c1c4eea71d5c61f542f944970c237679b9f32acf71d400608b94d16c828d913ce2e2b6dc0afbc714c7b6d4
SSDEEP

6144:m9+O0pq7cfwablr6NirozpBePObT0Bn81E92hbS2ajqos8CGmqbT:W0pq72waboMEBe2bT0B8O9qbS2MqOCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
556130479babcbcaf90c3b2250696c44_JaffaCakes118

Files

556130479babcbcaf90c3b2250696c44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc77b5e8e221b9513e5a090d61cabda0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetPrivateProfileStructW
GetComputerNameA
LoadLibraryA
ResumeThread
CloseHandle
GetDiskFreeSpaceA
GetDriveTypeA
ResetEvent
LocalFree
GetTickCount
CreateFileA
GetSystemTime
GetFileAttributesA
FindAtomA
SetLastError
GetModuleHandleA
GetCommandLineW
lstrlenA
HeapCreate

advapi32

FreeSid
GetFileSecurityW
RegEnumKeyExA
IsTokenUntrusted
RegQueryValueA
CreateServiceA
CloseEventLog
GetUserNameA
GetLengthSid
RegCreateKeyExA
RegCloseKey
RegEnumValueA
RegDeleteKeyA

clbcatq

DllGetClassObject
SetSetupSave
ComPlusMigrate
SetupOpen
CheckMemoryGates

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ