7bc8e9eb9f3d874764d2658b546abb61_JaffaCakes118 | Triage

Sharing

General

Target

7bc8e9eb9f3d874764d2658b546abb61_JaffaCakes118
Size

356KB
MD5

7bc8e9eb9f3d874764d2658b546abb61
SHA1

40b7e79add5449ac8b11b20ddeb338437a0d17bb
SHA256

d7a54e392cc051e8fae6d26431351d405fe9836e9467bde07187a8586e0e4fbb
SHA512

2f633cfd7194a11aaa68b7d42a31e95700d908a5af4c40616427d78afd5bebf56f0a9233bcde1cd500540bf5d553e5320aed1876a42dc934d74e1de3f7a7439d
SSDEEP

6144:NOWcl+ocAAe1EAnT43osv0pnzKK+PDncAuLELquaWVzsHA93Wo8nswPm22fwh:NFeq0F+PzcOLyWRsHA93/oswe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7bc8e9eb9f3d874764d2658b546abb61_JaffaCakes118

Files

7bc8e9eb9f3d874764d2658b546abb61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d99023a51a2afe075f983867689c9f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PlayEnhMetaFileRecord
GetSystemPaletteEntries
EqualRgn
EndPage
ExtSelectClipRgn
CancelDC
GetROP2
DPtoLP
LPtoDP
CreateDCW
DeleteEnhMetaFile
GetTextExtentPoint32W
CreateFontW
SetPixelFormat
FillPath
GetBkColor
Polygon

msvcrt

_inpw
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_eof
printf
_jn
_onexit
__dllonexit
scanf
__pioinfo
_controlfp

advapi32

CreateProcessAsUserA
SetSecurityDescriptorGroup
CreateServiceA

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ