f8950f957f694940d06385d79cad8744_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8950f957f694940d06385d79cad8744_JaffaCakes118
Size

68KB
MD5

f8950f957f694940d06385d79cad8744
SHA1

a9f2400c94dff5bcbf146911be1b751ab88ba4dd
SHA256

360da771d6bf741b8d505432edf15a67675117d43327ead624da39c70b412e53
SHA512

12c80158f1ba1679344440d7e5852559022936a38e33ca511b46370319d86bf2c172b5a919c40007248af98c10e0a46818240c422024e660fd9489298640f4b8
SSDEEP

768:lWtMsoRgjKpoQ5gfKodxY7FOtxvT1wsG4ET:otMsoUQ2zxSwH1wsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8950f957f694940d06385d79cad8744_JaffaCakes118

Files

f8950f957f694940d06385d79cad8744_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4082a31941a639d32160559ee032d374

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
CloseHandle
GetModuleHandleA
DeleteFileA
SetFileAttributesA
GetCurrentProcess
GetSystemInfo
GetLastError
LoadLibraryA
GetProcAddress
SizeofResource
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ