02f26c6d5c7a5e845a4c1daab2194717_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02f26c6d5c7a5e845a4c1daab2194717_JaffaCakes118
Size

72KB
MD5

02f26c6d5c7a5e845a4c1daab2194717
SHA1

f02e2b5f4374abb3e587f9cfeaa75628f2b75fa2
SHA256

17588181145cfd6c54c29ca96b271bfea9ff95c96679863c9ef445824142ee5e
SHA512

408e50532dd2e9f39337717bf6b707ba1184a69f2880ebd89a6f995fdff0ddf2a674963e29501237159d4b0bcb3b64fb9f7eaca5f84264e1c7ae3bedc6d728db
SSDEEP

768:AiaTuAovwOGeDVcYLgO2/MuTPUaq+4oJbu7ZLwy1OOv:Aia0YOGsy1O0MuTPUN+4IaLwysOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02f26c6d5c7a5e845a4c1daab2194717_JaffaCakes118

Files

02f26c6d5c7a5e845a4c1daab2194717_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a06ac31cff5ee816927ac0b59fd87a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
GetModuleHandleA
GetCurrentProcess
WriteFile
CreateFileA
GetLastError
LoadLibraryA
SetFileAttributesA
GetProcAddress
GetStartupInfoA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegCreateKeyExA
RegCloseKey
OpenProcessToken

user32

GetClassNameA
GetForegroundWindow

winmm

mixerGetLineInfoA
mixerSetControlDetails
mixerOpen

msvcrt

_onexit
__setusermatherr
_initterm
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
__dllonexit
__getmainargs
_exit
_XcptFilter
exit
_acmdln
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ