f0369cf810c4a46cc7e1f1ce01f5da5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0369cf810c4a46cc7e1f1ce01f5da5f_JaffaCakes118
Size

80KB
MD5

f0369cf810c4a46cc7e1f1ce01f5da5f
SHA1

672d4c579c9a02c86aa082d0240c4d21b46858e2
SHA256

ae6dd8f284c62b507eefbe49dfee5c66ed68e32d4529529fd372c2dbf40d7c3d
SHA512

e4831ff091e20fd6ee505b73d4be83788b3b8e8501f0a1570d73f39bd453d5b07da80cbeed592813181a38e40aa7bb2271ca6dd1407fa817790dcad76f8e22da
SSDEEP

1536:joZ0prrYxZmkuO5yTzuAkZTbno8lIFwzEEP774o:joZ0prrMmE5EaLlIoEEP774o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0369cf810c4a46cc7e1f1ce01f5da5f_JaffaCakes118

Files

f0369cf810c4a46cc7e1f1ce01f5da5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfa87a86e2df87ef9553e2040e604718

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
WriteFile
CreateFileA
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetSystemInfo
ExitProcess
GetLastError
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

user32

GetForegroundWindow
GetParent

winmm

mixerSetControlDetails
mixerGetLineInfoA
mixerOpen

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ