fc9381f90b6c03a180cb0619cd81619e_JaffaCakes118 | Triage

Sharing

General

Target

fc9381f90b6c03a180cb0619cd81619e_JaffaCakes118
Size

3KB
MD5

fc9381f90b6c03a180cb0619cd81619e
SHA1

1bad0f80a8e75b196716202f7b52616ce73c6114
SHA256

a50743ce57a768c86439ed27f2e2f8ab0a0eb5ef079b9e1d0b903f81a788883c
SHA512

7a2f66cdbcaff031b99b39bea485cf18414d2db9f460ab7a37fa576d7ed87e704feb38f543e4e9b2681d62e47e41e0ce34b4eb08c27642f83bc9e3544582e25b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc9381f90b6c03a180cb0619cd81619e_JaffaCakes118

Files

fc9381f90b6c03a180cb0619cd81619e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

aa57ab958c5dfd47adbac79d9c490f1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE