e276f2c49d194def764a383482ecbd03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e276f2c49d194def764a383482ecbd03_JaffaCakes118
Size

7KB
MD5

e276f2c49d194def764a383482ecbd03
SHA1

e6809cd336e4065bf1db62c6ea24fa064ef9ac84
SHA256

c3636cd797f46f55e96cadeedf593663c0ebe2bc5cc1dabef6d1e62b5f6911c3
SHA512

c1f1b03d2bebe755de2b08be2bb3732a7318fd7b58cd8204fe94cedacf2a18ada495b7ee30c410f126f83ddcce3a21366e286f1e9a7956fdad6bf4754f86caa9
SSDEEP

192:MALZXP2hcKJ2YiWZthIUyDCewbHicTj2:MUXP0cKdi07iNcP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e276f2c49d194def764a383482ecbd03_JaffaCakes118

Files

e276f2c49d194def764a383482ecbd03_JaffaCakes118
.exe windows:1 windows x86 arch:x86

aa57ab958c5dfd47adbac79d9c490f1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE